D8
Supply Chain
Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.
Weight 4%88% confidence
90
Excellent
info
How This Score Is Built
Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.
+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative
Scoring Tree
BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
799
Current BRI
D8Supply Chain
Weight 4%
90
(90/100)^0.04 = 0.9958
Contributing Factors
+30Extremely minimal dependency chain (by design)
+30Formal verification of core invariants
+30Clean, well-audited codebase (Spearbit, Cantina)
0No proxy patterns on base layer
Score Composition
0
No proxy patterns on base layer
+30
Extremely minimal dependency chain (by design)
+30
Formal verification of core invariants
+30
Clean, well-audited codebase (Spearbit, Cantina)
Evidence Chain (2 files)
GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)sha256:c3072f628c20...
BlackHart AnalysisMay 4, 2026, 08:00 PM
open_in_newSupply Chain — GitHub Supply Chainsha256:3f05f2cfd3a4...
Score History
No dimension-level score changes recorded yet.
Methodology: 2.1Formula: 1.1Weights: 1.1