# Changelog

## Score

- CAI 30 → 28 (-2.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 31 → 29 (-1.5)
- Architecture 94 → 94 (+0.0)
- Maturity 57 → 37 (-19.2)
- Readiness 16 → 16 (+0.0)
- Security 72 → 72 (+0.0)
- Accessibility 35 → 30 (-4.7)
- Performance 100 → 100 (+0.0)

## Resolved (13)

- Concentrated knowledge decay
- Documentation: no project overview (docs/minicpm_v1.md)
- Documentation: no project overview (docs/minicpm_v2dot6.md)
- Documentation: no project overview (docs/minicpm_v2dot6_zh.md)
- Documentation: no project overview (docs/minicpm_v4dot5_en.md)
- High CVE: [GHSA redacted] (eval_mm/vqaeval/requirements.txt)
- High CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- High CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- Low CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- Most significant orphaned file (eval_mm/vlmevalkit/vlmeval/dataset/cgbench.py)
- Most significant orphaned file (eval_mm/vlmevalkit/vlmeval/dataset/image_mcq.py)
- Most significant orphaned file (eval_mm/vlmevalkit/vlmeval/dataset/image_vqa.py)
- Off-boarding risk: anonymized user #1

## New (7)

- High CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- High CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- High CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- High vulnerability: [GHSA redacted] (eval_mm/vqaeval/requirements.txt)
- High vulnerability: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- Medium CVE: [GHSA redacted] (web_demos/minicpm-o_2.6/web_server/pnpm-lock.yaml)
- Off-boarding risk: anonymized user #1

## Changes since last survey

- 27 commits — 27 feature/other, 0 fixes

## By area

- (root) — 13 commits
- (repo) — 5 commits
- docs/minicpm_v4dot7_en.md — 4 commits
- assets/minicpmv4.7 — 3 commits
- docs/api.md — 1 commit
- docs/deployment_en.md — 1 commit

## Notable commits

- change: Merge branch 'main' of https://github.com/OpenBMB/MiniCPM-o
- change: Merge pull request #1145 from lmc8133/main
- change: Merge pull request #1146 from lmc8133/main
- change: Merge pull request #1148 from lmc8133/main
- change: Merge pull request #1151 from lmc8133/main
- change: Release MiniCPM-V 4.7
- change: Release MiniCPM-V 4.7
- change: Release MiniCPM-V 4.7
- change: docs: add DSpark heads and link model guides
- change: docs: add LES and SRFT links, note 3GB iPhone memory, and credit Qwen3.5.
- change: docs: add MiniCPM-V 4.7 to API guide
- change: docs: add MiniCPM-V 4.7 to deployment API links
- change: docs: add OpenVINO notebook link for MiniCPM-V 4.7
- change: docs: add homepage model weights and explicit DSpark format links
- change: docs: add model and demo links to homepage navigation
- change: docs: add recommended Transformers sampling parameters for MiniCPM-V 4.7.
- change: docs: emphasize DSpark speculative decoding
- change: docs: expose DSpark GGUF links in model introductions
- change: docs: link LES references to technical documentation
- change: docs: note MiniCPM-V 4.7 sampling parameters apply in instruct mode.
- …and 7 more

## Architecture

- 0 containers · 2 bounded contexts · 0 dependency edges (baseline)