Borehole reading · not a certification

Check a mark

A Borehole code resolves to the analysis we actually ran. Type the code printed on a report and this page re-renders the authoritative version — not a claim about it.

Twelve characters. Case and dashes do not matter.

Verified

This code matches a Borehole analysis of sixlabors/imagesharp, and the record is unchanged since the mark was issued.

Repository
sixlabors/imagesharp
Commit
c0ee744956433b7ad719ab2d7d8d9c8975e9b653
Surveyed
2026-10-02
Mark issued
2026-10-02
Assessor
borehole 0.7.10
Checks run
106
Ran in
cloud-run — not attested

This commit has been surveyed again since this mark was issued. The mark above is still valid — it attests to the survey it was issued for, and always will. But a newer reading of the same commit exists, made by borehole 0.7.13 on 2026-10-04, finding 6 things against this one's 6. Read the newer one.

Its report page publishes this analysis under today's rules. The mark above still attests to the record as issued. The page differs from it as follows, and its headline band reads adequate.

What the analysis recorded

DimensionBandFindings
Architecture & Codebase — including AI provenance strong 1
Engineering Process & SDLC Maturity strong 1
Organization & Key-Person Risk adequate 1
Product & Engineering Maturity strong 0
Security & Reliability Posture strong 3
Observability & Operations not assessable 0
Fit with the Acquirer not assessable 0

Read the full analysis