# Changelog

## Score

- CAI 59 → 46 (-12.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 56 → 54 (-1.9)
- Maturity 53 → 62 (+9.4)
- Readiness 60 → 32 (-27.8)
- Security 75 → 75 (+0.0)

## Resolved (13)

- Coverage not included — suite not readable by the collector
- Critical vulnerability: [GHSA redacted] (package-lock.json)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Dormant codebase
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- dormant codebase — no living knowledge left to concentrate

## New (32)

- Change coupling: applyEach.js ↔ initialParams.js (lib/internal/applyEach.js)
- Change coupling: constant.js ↔ initialParams.js (lib/constant.js)
- Change coupling: initialParams.js ↔ memoize.js (lib/internal/initialParams.js)
- Critical CVE: [GHSA redacted] (package-lock.json)
- Critical CVE: [GHSA redacted] (package-lock.json)
- Dimension evaluation failed
- Documentation for whilst.js is clipped mid-sentence, so the next function body and callback details are not visible. (docs/v3/whilst.js.html)
- FileTooLong: theme/publish.js (support/jsdoc/theme/publish.js)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- …and 12 more