# Changelog

## Score

- CAI 46 → 33 (-13.6)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 92 → 64 (-28.3)
- Maturity 56 → 50 (-6.0)
- Readiness 37 → 18 (-18.4)
- Security 40 → 40 (+0.0)

## Resolved (15)

- Change coupling: Features.tsx ↔ HeroSection.tsx (apps/www/src/layout/Landing/Features.tsx)
- Change coupling: FileMenu.tsx ↔ ToolsMenu.tsx (apps/www/src/features/editor/Toolbar/FileMenu.tsx)
- Change coupling: HeroSection.tsx ↔ Section1.tsx (apps/www/src/layout/Landing/HeroSection.tsx)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High vulnerability: [GHSA redacted] (pnpm-lock.yaml)
- High vulnerability: [GHSA redacted] (pnpm-lock.yaml)
- Low CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium vulnerability: [GHSA redacted] (pnpm-lock.yaml)
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block
- The 'Privacy' section claims full offline operation but does not state whether local JSON parsing or visualization itself violates privacy (e.g., storing parsed data in memory). (apps/vscode/README.md)

## New (43)

- Dimension evaluation failed
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- Hotspot: packages/jsoncrack-react/src/canvasHelpers.ts (packages/jsoncrack-react/src/canvasHelpers.ts)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- …and 23 more