# Changelog

## Score

- CAI 41 → 44 (+2.5)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 64 → 65 (+1.1)
- Architecture 56 → 63 (+6.2)
- Maturity 68 → 68 (+0.0)
- Readiness 53 → 40 (-12.4)
- Security 32 → 41 (+8.4)
- Accessibility 40 → 40 (+0.1)
- Performance 60 (new)

## Resolved (27)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (README.md)
- High CVE: [GHSA redacted] (package-lock.json)
- Hotspot: packages/blockly/core/block.ts (packages/blockly/core/block.ts)
- Hotspot: packages/blockly/core/block_svg.ts (packages/blockly/core/block_svg.ts)
- Hotspot: packages/blockly/core/events/utils.ts (packages/blockly/core/events/utils.ts)
- Hotspot: packages/blockly/core/field.ts (packages/blockly/core/field.ts)
- Hotspot: packages/blockly/core/field_dropdown.ts (packages/blockly/core/field_dropdown.ts)
- Hotspot: packages/blockly/core/field_input.ts (packages/blockly/core/field_input.ts)
- Hotspot: packages/blockly/core/generator.ts (packages/blockly/core/generator.ts)
- Hotspot: packages/blockly/core/renderers/zelos/info.ts (packages/blockly/core/renderers/zelos/info.ts)
- Hotspot: packages/blockly/core/shortcut_items.ts (packages/blockly/core/shortcut_items.ts)
- Hotspot: packages/blockly/core/workspace_svg.ts (packages/blockly/core/workspace_svg.ts)
- Hotspot: packages/blockly/core/xml.ts (packages/blockly/core/xml.ts)
- Hotspot: packages/blockly/tests/mocha/test_helpers/svg_layout_stubs.js (packages/blockly/tests/mocha/test_helpers/svg_layout_stubs.js)
- Hotspot: packages/plugins/field-bitmap/src/field-bitmap.ts (packages/plugins/field-bitmap/src/field-bitmap.ts)
- Hotspot: packages/plugins/field-grid-dropdown/src/grid.ts (packages/plugins/field-grid-dropdown/src/grid.ts)
- Hotspot: packages/plugins/field-multilineinput/src/field_multilineinput.ts (packages/plugins/field-multilineinput/src/field_multilineinput.ts)
- Hotspot: packages/plugins/workspace-backpack/src/backpack.ts (packages/plugins/workspace-backpack/src/backpack.ts)
- Medium CVE: [GHSA redacted] (package-lock.json)
- …and 7 more

## New (30)

- Dependency hygiene PARTLY measured — Python dependencies read, no exact pin to grade for currency
- Documentation: no architecture or design documentation (packages/plugins/field-colour-hsv-sliders/README.md)
- Documentation: no project overview (packages/plugins/field-slider/README.md)
- Duplicated block (7 lines × 2) (packages/blockly/scripts/i18n/js_to_json.py)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low cohesion: Block (LCOM4 5) (packages/blockly/core/block.ts)
- Low cohesion: BlockSuggestor (LCOM4 4) (packages/plugins/suggested-blocks/src/index.js)
- Low cohesion: CommentEditor (LCOM4 4) (packages/blockly/core/comments/comment_editor.ts)
- Low cohesion: ConstantProvider (LCOM4 5) (packages/blockly/core/renderers/zelos/constants.ts)
- Low cohesion: TypedVariableModal (LCOM4 4) (packages/plugins/typed-variable-modal/src/TypedVariableModal.js)
- Low cohesion: WorkspaceComment (LCOM4 6) (packages/blockly/core/comments/workspace_comment.ts)
- …and 10 more

## Changes since last survey

- 36 commits — 28 feature/other, 8 fixes

## By area

- packages/blockly — 16 commits
- (root) — 13 commits
- packages/plugins — 4 commits
- packages/docs — 3 commits

## Notable commits

- fix: chore: fix flaky tests (#10545)
- fix: fix: Don't label image fields as "empty" when alt text not set (#10502)
- fix: fix: Fix bugs that caused inaccurate counts of flyout items with Zelos in Safari (#10500)
- fix: fix: Fix positioning of dropdown/widgetdivs in a bordered injection div (#10509)
- fix: fix: Improve keyboard-driven display of workspace context menus (#10505)
- fix: fix: Improve the display of comment focus rings (#10533)
- fix: fix: Make all toolbox blocks searchable (#10508)
- fix: fix: Restore auto-close behavior for standalone flyouts (#10506)
- change: Localisation updates from https://translatewiki.net. (#10523)
- change: Localisation updates from https://translatewiki.net. (#10539)
- change: Localisation updates from https://translatewiki.net. (#10549)
- change: chore(deps): Update field-colour dependency to latest version (#10529)
- change: chore(deps): bump css-loader from 7.1.4 to 7.1.5 (#10512)
- change: chore(deps): bump docusaurus-plugin-typedoc from 1.4.2 to 1.4.3 (#10538)
- change: chore(deps): bump fs-extra from 11.4.0 to 11.4.1 (#10537)
- change: chore(deps): bump ip-address (#10543)
- change: chore(deps): bump puppeteer-core from 25.9.0 to 25.11.0 (#10514)
- change: chore(deps): bump qs in the npm_and_yarn group across 1 directory (#10530)
- change: chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#10542)
- change: chore(deps): bump the nx group across 1 directory with 2 updates (#10511)
- …and 16 more

## Architecture

- Unchanged — 0 containers · 1 contexts · 0 edges