# Changelog

## Score

- CAI 54 → 55 (+1.6)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 69 → 61 (-7.9)
- Architecture 52 → 52 (+0.5)
- Maturity 58 → 58 (-0.1)
- Readiness 52 → 56 (+3.2)
- Security 54 → 60 (+6.3)
- Performance 60 (new)

## Resolved (6)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (README.md)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Off-boarding risk: anonymized user #1

## New (120)

- (anonymous) (cognitive 147) (proto-extract/index.js)
- (anonymous) (cyclomatic 77) (proto-extract/index.js)
- Banned license: libsignal
- FileTooLong: Socket/chats.ts (src/Socket/chats.ts)
- FileTooLong: Socket/messages-recv.ts (src/Socket/messages-recv.ts)
- FileTooLong: Socket/messages-send.ts (src/Socket/messages-send.ts)
- FileTooLong: Socket/socket.ts (src/Socket/socket.ts)
- FileTooLong: Utils/chat-utils.ts (src/Utils/chat-utils.ts)
- FileTooLong: Utils/messages-media.ts (src/Utils/messages-media.ts)
- FileTooLong: Utils/messages.ts (src/Utils/messages.ts)
- FileTooLong: Utils/process-message.ts (src/Utils/process-message.ts)
- FunctionTooLong: business.makeBusinessSocket (src/Socket/business.ts)
- FunctionTooLong: chat-utils.chatModificationToAppPatch (src/Utils/chat-utils.ts)
- FunctionTooLong: chat-utils.processSyncAction (src/Utils/chat-utils.ts)
- FunctionTooLong: chats.makeChatsSocket (src/Socket/chats.ts)
- FunctionTooLong: communities.makeCommunitiesSocket (src/Socket/communities.ts)
- FunctionTooLong: event-buffer.append (src/Utils/event-buffer.ts)
- FunctionTooLong: event-buffer.makeEventBuffer (src/Utils/event-buffer.ts)
- FunctionTooLong: groups.makeGroupsSocket (src/Socket/groups.ts)
- FunctionTooLong: libsignal.makeLibSignalRepository (src/Signal/libsignal.ts)
- …and 100 more