# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 64 → 49 (-15.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 83 → 100 (+17.4)
- Maturity 65 → 72 (+7.5)
- Readiness 71 → 34 (-36.2)
- Security 53 → 47 (-6.1)

## Resolved (52)

- Config::from (cognitive 21) (src/config.rs)
- Config::from (cyclomatic 19) (src/config.rs)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- FileTooLong: src/cli.rs (src/cli.rs)
- FileTooLong: src/paint.rs (src/paint.rs)
- Further orphaned files (smaller)
- Further sole-owners (lower concentration)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium CVE: [GHSA redacted] (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2021-0139 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2024-0320 (Cargo.lock)
- Medium advisory (unmaintained): RUSTSEC-2025-0141 (Cargo.lock)
- Medium advisory (unsound): RUSTSEC-2026-0008 (Cargo.lock)
- Medium advisory (unsound): RUSTSEC-2026-0097 (Cargo.lock)
- Medium advisory (unsound): RUSTSEC-2026-0183 (Cargo.lock)
- Medium advisory (unsound): RUSTSEC-2026-0184 (Cargo.lock)
- Medium advisory (unsound): RUSTSEC-2026-0190 (Cargo.lock)
- Medium vulnerability: [GHSA redacted] (Cargo.lock)
- Medium vulnerability: RUSTSEC-2026-0194 (Cargo.lock)
- …and 32 more

## New (6)

- Decision is a one-line rule with no context (why 24-bit color matters) and consequences/trade-offs are absent (manual/src/tips-and-tricks/24-bit-color-truecolor.md)
- Dimension evaluation failed
- Low IaC: DS-0026 (etc/docker/ubuntu.Dockerfile)
- Medium: security finding (details withheld)
- No automated tests
- No tests found