# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 41 → 63 (+22.2)
- Rubric changed (rubric-2026.08.15 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 96 → 93 (-3.2)
- Architecture 94 → 100 (+5.9)
- Maturity 50 → 55 (+5.3)
- Readiness 25 → 52 (+27.7)
- Security 39 → 83 (+44.4)

## Resolved (18)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Medium: security finding (details withheld)
- No artifact signing
- No exposed public API
- No tests found
- Test reliability not included
- Unpinned build actions

## New (18)

- ClassTooLong: WrongTimberUsageDetector (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- Dependency hygiene PARTLY measured — Maven/Gradle declarations read, no dependency graph resolved
- Documentation: no installation or build instructions (README.md)
- Documentation: no licence statement (README.md)
- Documentation: no project overview (README.md)
- Documentation: no usage examples (README.md)
- FileTooLong: lint/WrongTimberUsageDetector.kt (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- MethodTooLong: WrongTimberUsageDetector.checkFormatArguments (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- Orphaned files with no living knowledge
- TodoComment (timber-sample/src/main/java/com/example/timber/FakeCrashLibrary.java)
- TodoComment (timber-sample/src/main/java/com/example/timber/FakeCrashLibrary.java)
- TodoComment (timber-sample/src/main/java/com/example/timber/FakeCrashLibrary.java)
- Workflow token permissions not restricted
- WrongTimberUsageDetector.checkExceptionLogging (cognitive 20) (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- WrongTimberUsageDetector.checkFormatArguments (cognitive 28) (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- WrongTimberUsageDetector.checkFormatArguments (cyclomatic 65) (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- WrongTimberUsageDetector.getFormatArgumentCount (cognitive 23) (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)
- WrongTimberUsageDetector.getStringArgumentTypes (cognitive 20) (timber-lint/src/main/java/timber/lint/WrongTimberUsageDetector.kt)

## Changes since last survey

- 20 commits — 20 feature/other, 0 fixes

## By area

- .github/workflows — 10 commits
- gradle/libs.versions.toml — 7 commits
- gradle/wrapper — 2 commits
- .github/renovate.json5 — 1 commit

## Notable commits

- change: Extend shared Renovate config (#655)
- change: Pin dependencies (#656)
- change: Update AGP (#652)
- change: Update AGP (#665)
- change: Update Gradle to v9.7.0 (#649)
- change: Update Gradle to v9.7.1 (#651)
- change: Update JamesIves/github-pages-deploy-action action to v3.7.1 (#663)
- change: Update JamesIves/github-pages-deploy-action action to v4 (#664)
- change: Update actions/checkout action to v7.0.1 (#657)
- change: Update actions/setup-java action to v6 (#653)
- change: Update actions/setup-java action to v6.0.1 (#669)
- change: Update dependency com.diffplug.spotless:spotless-plugin-gradle to v8.10.0 (#650)
- change: Update dependency com.diffplug.spotless:spotless-plugin-gradle to v8.10.1 (#654)
- change: Update dependency com.diffplug.spotless:spotless-plugin-gradle to v8.10.2 (#666)
- change: Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.20 (#667)
- change: Update dependency org.robolectric:robolectric to v4.17 (#670)
- change: Update ffurrer2/extract-release-notes action to v3.1.0 (#659)
- change: Update gradle/actions action to v6.3.0 (#660)
- change: Update softprops/action-gh-release action to v3.0.2 (#658)
- change: Update softprops/action-gh-release action to v3.0.3 (#661)

## Architecture

- Containers 0 added · 0 removed · contexts 1 added · 0 removed · edges 0 added · 0 removed

## Added bounded contexts (1)

- timber