Interactive sample report

See the evidence before you connect a repository.

This fictional Passport shows the level of detail and transparency you can expect: what the repository proves, what Deenix infers, and what cannot be verified from code alone.

Software health82/100Good, with 3 material risks

How to read this report

Verified

Directly supported by repository files, configuration, or dependency data.

Inferred

A risk suggested by available evidence, but not proven without runtime or infrastructure access.

Not verified

Outside the connected repository or missing enough evidence for a responsible conclusion.

Prioritized findings

What needs attention first.

Findings are ranked by likely business impact, strength of evidence, and the effort required to reduce the risk.

01
High priorityVerifiedHigh confidence

Three production dependencies have known security advisories.

Why it matters Attackers may be able to use publicly documented weaknesses if the affected code paths are exposed.

Repository evidencepackage-lock.json · 3 direct dependencies · advisory match confirmed
02
Medium priorityInferredMedium confidence

Recovery may depend on knowledge held outside the repository.

Why it matters A service interruption could take longer to resolve if deployment and restore steps are unavailable to the wider team.

Repository evidenceNo runbook found · deployment workflow present · backup process not documented
03
Medium priorityVerifiedHigh confidence

The release workflow does not require automated tests to pass.

Why it matters A change can reach production even when the repository's existing tests fail or do not run.

Repository evidence.github/workflows/deploy.yml · deploy job has no test dependency

Important limitations

What this repository review cannot verify.

  • Production configurationRuntime settings, network controls, and live secrets were not accessed.
  • Backup successThe repository does not prove that backups run or that a restore has been tested.
  • Active exploitationA dependency advisory does not prove the application has been compromised.
  • Real-world availabilityUptime and incident history require monitoring or infrastructure evidence.

Score transparency

How the 82 is formed.

The sample score summarizes weighted evidence across six categories. Missing evidence lowers confidence and can reduce a category score; it is never silently treated as a pass.

Security78
Dependencies71
Reliability80
Documentation88
Maintainability86
Continuity76

Ready to see your evidence?

Run the same kind of check on your application.

Deenix uses read-only repository access and does not change or deploy your code.

Check my app →Review our access model