# Changelog

## Score

- CAI 62 → 58 (-3.8)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 100 → 69 (-30.4)
- Architecture 100 → 100 (+0.0)
- Maturity 51 → 53 (+1.8)
- Readiness 50 → 48 (-1.5)
- Security 88 → 88 (+0.0)

## Resolved (3)

- Dependency hygiene PARTLY measured — sbt declarations read, no exact version to grade for currency
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted

## New (3)

- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted (.github/workflows/build.yml)
- Workflow token permissions not restricted (.github/workflows/release.yml)

## Changes since last survey

- 2 commits — 2 feature/other, 0 fixes

## By area

- (root) — 1 commit
- src/sbt-test — 1 commit

## Notable commits

- change: Add jna dependency explicitly (#356)
- change: Release version 3.4.0
