Borehole reading · not a certification
Check a mark
A Borehole code resolves to the analysis we actually ran. Type the code printed on a report and this page re-renders the authoritative version — not a claim about it.
Twelve characters. Case and dashes do not matter.
Verified
This code matches a Borehole analysis of apache/apisix, and the record is unchanged since the mark was issued.
- Repository
- apache/apisix
- Commit
- cea64fbf40c6244ebbd99b139e6896ee72aea295
- Surveyed
- 2026-10-23
- Mark issued
- 2026-10-23
- Assessor
- borehole 0.7.15
- Checks run
- 106
- Ran in
- cloud-run — not attested
Its report page publishes this analysis under today's rules. The mark above still attests to the record as issued. The page differs from it as follows, and its headline band reads strong.
- 2 findings from checks Borehole's calibration found wrong more often than right are no longer published.
- The file and line of 5 credential-shaped matches are withheld. File and line are shown to whoever GitHub says controls this repository, signed in, and to a buyer of this report.
What the analysis recorded
| Dimension | Band | Findings |
|---|---|---|
| Architecture & Codebase — including AI provenance | strong | 1 |
| Engineering Process & SDLC Maturity | strong | 1 |
| Organization & Key-Person Risk | strong | 0 |
| Product & Engineering Maturity | strong | 2 |
| Security & Reliability Posture | adequate | 5 |
| Observability & Operations | adequate | 3 |
| Fit with the Acquirer | not assessable | 0 |