# Changelog

## Score

- CAI 32 → 35 (+3.6)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 56 → 56 (+0.0)
- Architecture 97 → 97 (-0.3)
- Maturity 33 → 33 (+0.0)
- Readiness 20 → 21 (+1.2)
- Security 35 → 57 (+21.7)

## Resolved (2)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)

## New (2)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (the committed lockfile resolved no direct production dependency)
- Documentation: no installation or build instructions (README.md)