# Changelog

## Score

- CAI 53 → 59 (+5.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 100 → 100 (+0.0)
- Architecture 69 → 69 (+0.0)
- Maturity 55 → 55 (+0.0)
- Readiness 61 → 61 (+0.0)
- Security 42 → 54 (+12.6)

## Resolved (4)

- Build action pinned to a mutable branch
- OSV Dependency Vulnerabilities not included (check did not complete)
- The README states infrastructure exceptions were added 'so you may be able to catch specific kind of infrastructure errors' but does not show how to catch them in code. (README.md)
- early-stage repository — too few commits for a meaningful bus factor

## New (4)

- High CVE: [GHSA redacted] (go.sum)
- Medium CVE: GO-2021-0226 (go.mod)
- The README installs via go get but does not show how to import or use the package in code. (README.md)
- single-maintainer — knowledge-concentration (bus factor) risk