# Changelog

## Score

- CAI 45 → 46 (+0.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 48 → 48 (+0.0)
- Architecture 88 → 88 (+0.0)
- Maturity 75 → 75 (-0.0)
- Readiness 62 → 62 (+0.0)
- Security 61 → 61 (+0.0)
- Accessibility 29 → 32 (+2.7)

## Resolved (24)

- Critical CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: Microsoft.NETCore.App 1.0.5
- High CVE: Microsoft.NETCore.App 1.0.5
- Low CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Low CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Low CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Low vulnerability: [GHSA redacted] (src/WebApp/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Medium CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- …and 4 more

## New (28)

- Critical CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Critical CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- Critical CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: [GHSA redacted] (src/WebApp/wwwroot/lib/bootstrap/package-lock.json)
- High CVE: Microsoft.NETCore.App 1.0.5
- …and 8 more

## API surface

- Unchanged — 10 HTTP endpoints