# Changelog

## Score

- CAI 50 → 60 (+9.8)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 67 → 68 (+1.4)
- Architecture 96 → 83 (-13.7)
- Maturity 63 → 62 (-1.8)
- Readiness 59 → 59 (+0.0)
- Security 33 → 55 (+22.3)

## Resolved (13)

- Documentation: no architecture or design documentation (README.md)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- Hotspot: src/VbNet.LanguageServer.Vb/Workspace/LegacyVbProjectReader.vb (src/VbNet.LanguageServer.Vb/Workspace/LegacyVbProjectReader.vb)
- Hotspot: src/extension/src/extension.ts (src/extension/src/extension.ts)
- Medium CVE: [GHSA redacted] (src/extension/package-lock.json)
- Members sharing a duplicated core (15 members, 50+ identical tokens) (src/VbNet.LanguageServer.Vb/Services/CallHierarchyService.vb)
- Members sharing a duplicated core (5 members, 50+ identical tokens) (src/VbNet.LanguageServer.Vb/Services/CallHierarchyService.vb)
- Members sharing a duplicated core (6 members, 50+ identical tokens) (src/VbNet.LanguageServer.Vb/Services/CallHierarchyService.vb)

## New (40)

- Build failed
- ClassTooLong: Program (test-explore/vbnet-lsp/VbNetLspSmokeTest.Vb/Program.vb)
- Documentation: no contributor guidance (README.md)
- Duplicated block (15 lines × 2) (test-explore/vbnet-lsp/VbNetLspSmokeTest.Vb/Program.vb)
- Duplicated block (23 lines × 4) (test-explore/clients/zed/probes/dap-probe/Program.cs)
- Duplicated block (34 lines × 2) (test-explore/clients/zed/probes/probe-harness/Program.cs)
- Duplicated block (45 lines × 2) (test-explore/clients/zed/probes/dap-probe/Program.cs)
- Duplicated block (8 lines × 2) (test-explore/clients/zed/probes/dap-probe/Program.cs)
- Duplicated block (8 lines × 2) (test-explore/clients/zed/probes/probe-harness/Program.cs)
- EmptyCatchBlock (test-explore/vbnet-lsp/VbNetLspSmokeTest.Vb/Program.vb)
- FileTooLong: VbNetLspSmokeTest.Vb/Program.vb (test-explore/vbnet-lsp/VbNetLspSmokeTest.Vb/Program.vb)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- High CVE: [GHSA redacted] (src/extension/package-lock.json)
- Inconsistent factory method naming convention. One method is named 'Success' (adjective/verb-like) and the other 'CreateError' (verb+noun). This breaks the symmetry of the API surface for constructing responses.
- Medium vulnerability: [GHSA redacted] (src/extension/package-lock.json)
- Members sharing a duplicated core (15 members, 50+ identical tokens) (src/VbNet.LanguageServer.Vb/Services/CallHierarchyService.vb)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (test-explore/clients/zed/probes/dap-probe/Program.cs)
- Members sharing a duplicated core (5 members, 50+ identical tokens) (src/VbNet.LanguageServer.Vb/Services/CallHierarchyService.vb)
- …and 20 more

## Architecture

- Containers 11 added · 0 removed · contexts 0 added · 0 removed · edges 0 added · 0 removed

## Added containers (11)

- cli:CSharpSample
- cli:DebugConsole
- cli:VbNet.Zed.DapProbe
- cli:VbNet.Zed.LspProbe
- cli:VbNet.Zed.ProbeHarness
- cli:VbNet.Zed.RealServerHarness
- cli:VbNetLspSmokeTest.Vb
- cli:ZedFixture
- cli:ZedSlnFixture
- cli:ZedSlnfFixture
- cli:ZedSlnxFixture