# Changelog

## Score

- CAI 49 → 40 (-8.6)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 84 → 85 (+0.9)
- Architecture 97 → 96 (-1.9)
- Maturity 59 → 50 (-8.6)
- Readiness 34 → 21 (-12.7)
- Security 53 → 47 (-6.0)

## Resolved (9)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Duplicated block (14 lines × 2) (app/src/main/java/com/github/nrfr/ui/screens/AboutScreen.kt)
- Low CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- Medium CVE: [GHSA redacted] (nrfr-client/go.mod)
- Medium CVE: GO-2025-3373 (nrfr-client/go.mod)
- Medium CVE: GO-2026-5024 (nrfr-client/go.mod)
- Medium CVE: GO-2026-5970 (nrfr-client/go.mod)
- Medium vulnerability: [GHSA redacted] (nrfr-client/frontend/package-lock.json)

## New (43)

- Coverage not measured — test suite did not build
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Critical CVE: [GHSA redacted] (nrfr-client/go.mod)
- Dimension evaluation failed
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/go.mod)
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/go.mod)
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- High CVE: [GHSA redacted] (nrfr-client/go.mod)
- Medium CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- Medium CVE: [GHSA redacted] (nrfr-client/frontend/package-lock.json)
- Medium CVE: [GHSA redacted] (nrfr-client/go.mod)
- …and 23 more

## Architecture

- Containers 0 added · 0 removed · contexts 0 added · 1 removed · edges 0 added · 0 removed

## Removed bounded contexts (1)

- .