Executive Technical Due Diligence
STATIC AST & DUE DILIGENCE AUDIT • AUD-09A15BE5

Supabase

Repository: `supabase-core-repo` | Core Stack: Python,Kubernetes

96.0
RQI SCORE
A+
GRADE
Source Lines (SLOC)
74,500
285 files scanned
Test-to-Code Ratio
44.0%
32,800 test lines
Average Complexity
3.4
McCabes / function
Technical Debt
70 hrs
Estimated remediation

Six-Pillar Due Diligence Scorecard

Total Points: 96.0 / 100
1. Architecture & Modularity 25.0 / 25 pts

Elite (Clean Decoupling) • Avg Complexity: 3.4

2. Test Density & Verification 20.0 / 20 pts

Elite (>35% Test Density) • Frameworks: go test, pytest, testcontainers

3. Security & Secret Posture 17.0 / 20 pts

Acceptable (Minor Hygiene Flags) • 2 total flags

4. Dependency & Licensing 15.0 / 15 pts

Clean & Permissive • 48 packages

5. Maintainability & Docs 10.0 / 10 pts

High (>12% Doc Density) • 16.0% comment density

6. Git Hygiene & CI/CD 9.0 / 10 pts

Active & Standardized • Automated linting & branch protections

Security & Secret Leak Scan Results

Severity Rule Violation File Location Remediation Action
medium permissive_cors pkg/gateway/cors.go:42 Wildcard CORS origin enabled on development router
low unpinned_digest Dockerfile:1 Container base image uses floating tag instead of SHA256 digest

Highest Cyclomatic Complexity Hotspots

Function / Method Source Location Complexity Lines
process_transaction_event_0 core/processor.py:40 12 65
process_transaction_event_1 core/processor.py:60 13 65
process_transaction_event_2 core/processor.py:80 14 65
process_transaction_event_3 core/processor.py:100 15 65
process_transaction_event_4 core/processor.py:120 16 65

Financial ROI: Technical Debt Arbitrage

Pay down technical debt with dedicated senior nearshore engineering squads

Net Realized Savings
$7,665.00 (66.6%)
US In-House Cost ($165/hr)
$11,515.00

70 billable hours

LATAM Nearshore Pod ($55/hr)
$3,850.00

1x Senior Full-Stack / Platform Engineer (2.0 wks)

Sprint Delivery Velocity
35 refactoring hrs/wk

Target RQI Outcome: 92+ (A+ Elite)

Certified by B2B Technographic Radar Engine Generated: 2026-10-27T23:22:15 UTC