BlackHartBlackHart
Scores/Hop Protocol/Provenance/Supply Chain
D8

Supply Chain

Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.

Weight 4%0.4% confidence
54
Concerning
info

How This Score Is Built

Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.

+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative

Scoring Tree

BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
721
Current BRI
D8Supply Chain
Weight 4%
54
(54/100)^0.04 = 0.9757
Contributing Factors
+54dependency_analysis
Evidence Sources
blackhart_analysisMay 4sha256:7cd0f8498865....View
blackhart_analysisMay 17sha256:7e766093359c....View

Score Composition

+54

dependency_analysis

Positiveopen_in_newGitHub Supply ChainMay 4, 2026

Evidence Chain (2 files)

GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)
sha256:7e766093359c...
BlackHart AnalysisMay 4, 2026, 11:00 PM
open_in_newSupply Chain — GitHub Supply Chain
sha256:7cd0f8498865...

Score History

No dimension-level score changes recorded yet.

Methodology: 2.1Formula: 1.1Weights: 1.1
How is Supply Chain scored?← Back to Provenance Ledger