# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 50 → 59 (+8.6)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Maturity 51 → 51 (+0.0)
- Readiness 37 → 51 (+14.3)
- Security 100 → 100 (+0.0)

## Resolved (3)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no committed lockfile, so no resolved version to grade)
- Documentation: no installation or build instructions (README.md)
- Scanner failed to run — not a clean result

## New (6)

- Coverage not measured — JavaScript/TypeScript suite
- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (the committed lockfile resolved no direct production dependency)
- High: security finding (details withheld)
- High: security finding (details withheld)
- No dependency advisory monitoring
- Workflow token permissions not restricted

## Changes since last survey

- 38 commits — 34 feature/other, 4 fixes

## By area

- (root) — 19 commits
- (repo) — 18 commits
- .github/workflows — 1 commit

## Notable commits

- fix: Fix broken and misleading native snippets in README
- fix: Merge pull request #265 from camsong/fix/readme-snippets
- fix: Merge pull request #282 from camsong/docs/zh-cn-fix-snippets
- fix: Sync snippet fixes to zh-CN README
- change: Merge modernization from #266 into master
- change: Merge pull request #266 from camsong/docs/modernize
- change: Merge pull request #268 from dvd233/docs/zh-tw-sync-267
- change: Merge pull request #269 from camsong/docs/id-sync-267
- change: Merge pull request #270 from camsong/docs/pt-br-sync-267
- change: Merge pull request #271 from camsong/docs/vi-sync-267
- change: Merge pull request #272 from camsong/docs/it-sync-267
- change: Merge pull request #273 from camsong/docs/ru-sync-267
- change: Merge pull request #274 from camsong/docs/tr-sync-267
- change: Merge pull request #275 from camsong/docs/my-sync-267
- change: Merge pull request #276 from camsong/docs/kg-sync-267
- change: Merge pull request #277 from camsong/docs/ko-kr-sync-267
- change: Merge pull request #278 from camsong/docs/es-sync-267
- change: Merge pull request #279 from camsong/docs/fr-sync-267
- change: Merge pull request #280 from camsong/docs/pl-sync-267
- change: Merge pull request #281 from camsong/docs/ja-sync-267
- …and 18 more