# Changelog

## Score

- CAI 56 → 42 (-13.8)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 91 → 96 (+5.7)
- Architecture 100 → 94 (-5.9)
- Maturity 54 → 50 (-4.3)
- Readiness 36 → 17 (-19.5)
- Security 90 → 65 (-24.8)

## Resolved (31)

- AbstractJsonLexer.consumeNumericLiteral (cognitive 55) (formats/json/commonMain/src/kotlinx/serialization/json/internal/lexer/AbstractJsonLexer.kt)
- AbstractJsonLexer.consumeNumericLiteral (cyclomatic 36) (formats/json/commonMain/src/kotlinx/serialization/json/internal/lexer/AbstractJsonLexer.kt)
- AbstractJsonLexer.skipElement (cognitive 18) (formats/json/commonMain/src/kotlinx/serialization/json/internal/lexer/AbstractJsonLexer.kt)
- CborParser.skipElement (cognitive 20) (formats/cbor/commonMain/src/kotlinx/serialization/cbor/internal/Decoder.kt)
- CharsetReader.doRead (cognitive 22) (formats/json/jvmMain/src/kotlinx/serialization/json/internal/CharsetReader.kt)
- Coverage not included — suite not readable by the collector
- DeletionChecksKt.parseR8Output (cognitive 21) (rules/rules-integration-tests/src/shared/kotlinx/serialization/r8/DeletionChecks.kt)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Duplicated block (10 lines × 2) (formats/json/commonMain/src/kotlinx/serialization/json/internal/lexer/CommentLexers.kt)
- Duplicated block (7 lines × 3) (core/jsMain/src/kotlinx/serialization/internal/Platform.kt)
- Further orphaned files (smaller)
- Further sole-owners (lower concentration)
- High CVE: [GHSA redacted] (kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (kotlin-js-store/yarn.lock)
- High vulnerability: [GHSA redacted] (kotlin-js-store/yarn.lock)
- JsonToJavaStreamWriter.writeUtf8 (cognitive 19) (formats/json/jvmMain/src/kotlinx/serialization/json/internal/JvmJsonStreams.kt)
- Low CVE: [GHSA redacted] (kotlin-js-store/yarn.lock)
- Off-boarding risk: anonymized user #1
- …and 11 more

## New (29)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Duplicated block (10 lines × 2) (core/jsMain/src/kotlinx/serialization/internal/Platform.kt)
- Duplicated block (13 lines × 2) (formats/json/commonMain/src/kotlinx/serialization/json/internal/StreamingJsonEncoder.kt)
- Duplicated block (14 lines × 2) (core/jsMain/src/kotlinx/serialization/internal/Platform.kt)
- Duplicated block (14 lines × 2) (formats/json/commonMain/src/kotlinx/serialization/json/internal/lexer/CommentLexers.kt)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- High CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- Low CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- Low CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- Medium CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- Medium CVE: [GHSA redacted] (integration-test/kotlin-js-store/yarn.lock)
- …and 9 more

## Architecture

- Containers 0 added · 0 removed · contexts 0 added · 1 removed · edges 0 added · 0 removed

## Removed bounded contexts (1)

- rules-integration-tests