# Changelog

## Score

- CAI 42 → 38 (-3.6)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 74 → 74 (+0.0)
- Maturity 64 → 42 (-21.6)
- Readiness 28 → 28 (+0.0)
- Security 68 → 62 (-6.5)
- Accessibility 42 → 42 (+0.0)

## Resolved (3)

- Low vulnerability: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Workflow token permissions not restricted

## New (8)

- Critical vulnerability: [GHSA redacted] (package-lock.json)
- Deprecated: whatwg-encoding (package-lock.json)
- Documentation: contradicts the code (docs/md/interview/2022-04-18-001-面试必问-聊聊JVM性能调优.md)
- Documentation: no project overview (docs/md/concurrent/ActualCombat/default.md)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Secret: generic-api-key (docs/wx/基于Docker+K8S+GitLab+Jenkins搭建持续交付环境yml文件/secret-gitlab.yaml)
- Workflow token permissions not restricted (.github/workflows/workflow.yml)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- (root) — 1 commit

## Notable commits

- change: feature: 同步文章