BlackHartBlackHart
Scores/Gearbox Protocol/Provenance/Supply Chain
D8

Supply Chain

Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.

Weight 4%0.4% confidence
56
Moderate
info

How This Score Is Built

Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.

+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative

Scoring Tree

BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
739
Current BRI
D8Supply Chain
Weight 4%
56
(56/100)^0.04 = 0.9771
Contributing Factors
+56dependency_analysis
Evidence Sources
blackhart_analysisMay 4sha256:4e6184211f81....View
blackhart_analysisMay 17sha256:12abea4e07dc....View

Score Composition

+56

dependency_analysis

Positiveopen_in_newGitHub Supply ChainMay 4, 2026

Evidence Chain (2 files)

GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)
sha256:12abea4e07dc...
BlackHart AnalysisMay 4, 2026, 11:00 PM
open_in_newSupply Chain — GitHub Supply Chain
sha256:4e6184211f81...

Score History

No dimension-level score changes recorded yet.

Methodology: 2.1Formula: 1.1Weights: 1.1
How is Supply Chain scored?← Back to Provenance Ledger