# Changelog

## Score

- CAI 53 → 40 (-12.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 64 → 57 (-7.0)
- Maturity 61 → 67 (+5.7)
- Readiness 58 → 32 (-26.4)
- Security 40 → 38 (-2.0)

## Resolved (16)

- Concentrated knowledge decay
- Coverage not included — suite not readable by the collector
- Critical vulnerability: [GHSA redacted] (pnpm-lock.yaml)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- High vulnerability: [GHSA redacted] (pnpm-lock.yaml)
- Largest orphaned file (src/core/core.controller.js)
- Largest orphaned file (src/core/core.scale.js)
- Largest orphaned file (src/plugins/plugin.tooltip.js)
- The 'Disclaimer' section warns against relying on this file in production but the accompanying Functions entry points to a separate script (utils.js) that is not shown in the document, leaving readers unsure whether the helper functions are stable or should be used at all. (docs/samples/utils.md)
- TooManyMethods: Chart (src/core/core.controller.js)
- TooManyMethods: DatasetController (src/core/core.datasetController.js)
- TooManyMethods: Scale (src/core/core.scale.js)

## New (63)

- Boundary-crossing change coupling: controller.bar.js ↔ element.bar.js (src/controllers/controller.bar.js)
- Change coupling: controller.bar.js ↔ controller.bubble.js (src/controllers/controller.bar.js)
- Change coupling: controller.bar.js ↔ controller.pie.js (src/controllers/controller.bar.js)
- Change coupling: controller.bubble.js ↔ controller.line.js (src/controllers/controller.bubble.js)
- Change coupling: controller.line.js ↔ controller.radar.js (src/controllers/controller.line.js)
- Change coupling: controller.polarArea.js ↔ controller.radar.js (src/controllers/controller.polarArea.js)
- Change coupling: core.controller.js ↔ core.registry.js (src/core/core.controller.js)
- Change coupling: core.controller.js ↔ platform.base.js (src/core/core.controller.js)
- Change coupling: plugin.legend.js ↔ plugin.title.js (src/plugins/plugin.legend.js)
- Critical CVE: [GHSA redacted] (pnpm-lock.yaml)
- Critical CVE: [GHSA redacted] (pnpm-lock.yaml)
- Dimension evaluation failed
- FileTooLong: controllers/controller.bar.js (src/controllers/controller.bar.js)
- FileTooLong: plugins/plugin.legend.js (src/plugins/plugin.legend.js)
- FileTooLong: scales/scale.radialLinear.js (src/scales/scale.radialLinear.js)
- FileTooLong: scales/scale.time.js (src/scales/scale.time.js)
- FileTooLong: specs/controller.bar.tests.js (test/specs/controller.bar.tests.js)
- FileTooLong: specs/core.controller.tests.js (test/specs/core.controller.tests.js)
- FileTooLong: specs/plugin.tooltip.tests.js (test/specs/plugin.tooltip.tests.js)
- High CVE: [GHSA redacted] (pnpm-lock.yaml)
- …and 43 more