# Changelog

## Score

- CAI 40 → 42 (+1.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 48 → 52 (+3.8)
- Architecture 88 → 88 (+0.0)
- Maturity 67 → 67 (+0.0)
- Readiness 43 → 43 (+0.0)
- Security 38 → 44 (+6.8)
- Accessibility 34 → 34 (-0.0)
- Performance 60 → 60 (+0.0)

## Resolved (5)

- Dependency hygiene not measured — this repository's dependencies are not NuGet
- Medium CVE: HtmlSanitizer 5.0.404
- Medium CVE: HtmlSanitizer 5.0.404
- Medium CVE: SharpCompress 0.28.2
- Medium CVE: SharpCompress 0.28.2

## New (9)

- Dependency hygiene not measured — no packages were read
- Medium CVE: HtmlSanitizer 5.0.404
- Medium CVE: HtmlSanitizer 5.0.404
- Medium CVE: SharpCompress 0.28.2
- Medium CVE: SharpCompress 0.28.2
- Medium IaC: CKV_DOCKER_3 (src/angular-zorro-free/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (src/aspnet-core/src/LTMCompanyNameFree.YoyoCmsTemplate.Web.Host/Dockerfile)
- Medium IaC: CKV_DOCKER_3 (src/aspnet-core/src/LTMCompanyNameFree.YoyoCmsTemplate.Web.Mvc/Dockerfile)
- Scanner failed to run — not a clean result

## API surface

- Unchanged — 4 HTTP endpoints