# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 46 → 47 (+0.5)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 40 → 40 (+0.7)
- Architecture 98 → 99 (+0.3)
- Maturity 51 → 51 (+0.0)
- Readiness 53 → 53 (+0.7)
- Security 65 → 69 (+3.4)
- Accessibility 46 → 46 (+0.0)

## Resolved (31)

- Documentation: no contributor guidance (README.md)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- High CVE: [GHSA redacted] (yarn.lock)
- ZoomBehavior (cyclomatic 22) (extensions/js/c3ext.js)
- convertDataToTargets (cyclomatic 31) (c3.esm.js)
- drag (cyclomatic 16) (c3.esm.js)
- flow (cyclomatic 28) (c3.esm.js)
- generate (cyclomatic 16) (extensions/js/c3ext.js)
- generateFlow (cognitive 32) (c3.esm.js)
- generateFlow (cyclomatic 25) (c3.esm.js)
- getHorizontalAxisHeight (cyclomatic 20) (c3.esm.js)
- getShapeOffset (cognitive 21) (c3.esm.js)
- getTooltipContent (cyclomatic 20) (c3.esm.js)
- getTooltipSortFunction (cyclomatic 16) (c3.esm.js)
- getYDomain (cyclomatic 45) (c3.esm.js)
- initWithData (cognitive 27) (c3.esm.js)
- initWithData (cyclomatic 25) (c3.esm.js)
- lineWithRegions (cyclomatic 20) (c3.esm.js)
- load (cognitive 16) (c3.esm.js)
- …and 11 more

## New (197)

- FileTooLong: js/c3.js (docs/js/c3.js)
- FileTooLong: src/arc.ts (src/arc.ts)
- FileTooLong: src/core.ts (src/core.ts)
- High CVE: [GHSA redacted] (yarn.lock)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- api.flow.Chart.flow (cognitive 52) (src/api.flow.ts)
- api.flow.Chart.flow (cyclomatic 28) (src/api.flow.ts)
- api.flow.ChartInternal.generateFlow (cognitive 33) (src/api.flow.ts)
- api.flow.ChartInternal.generateFlow (cyclomatic 25) (src/api.flow.ts)
- arc.ChartInternal.redrawArc (cognitive 57) (src/arc.ts)
- arc.ChartInternal.redrawArc (cyclomatic 44) (src/arc.ts)
- arc.ChartInternal.transformForArcLabel (cyclomatic 17) (src/arc.ts)
- c3.Chart.flow (cognitive 52) (c3.js)
- c3.Chart.flow (cognitive 52) (docs/js/c3.js)
- c3.Chart.flow (cyclomatic 28) (c3.js)
- c3.Chart.flow (cyclomatic 28) (docs/js/c3.js)
- c3.ChartInternal.convertDataToTargets (cognitive 24) (c3.js)
- c3.ChartInternal.convertDataToTargets (cognitive 24) (docs/js/c3.js)
- …and 177 more