# Changelog

## Score

- CAI 62 → 71 (+8.9)
- Rubric changed (rubric-2026.09.8 → rubric-2026.09.16) — scores are not directly comparable.

## Lenses

- Code Health 91 → 91 (-0.1)
- Architecture 99 → 85 (-14.1)
- Maturity 81 → 78 (-3.1)
- Readiness 71 → 76 (+5.6)
- Security 44 → 62 (+18.4)

## Resolved (4)

- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/io/delta/sharing/filters/JsonPredicates.scala)
- Off-boarding risk: anonymized user #1

## New (25)

- Duplicated block (12 lines × 2) (python/delta_sharing/protocol.py)
- Duplicated block (26–28 lines × 2) (python/delta_sharing/delta_sharing.py)
- Duplicated block (8 lines × 2) (python/delta_sharing/rest_client.py)
- Hotspot: python/delta_sharing/reader.py (python/delta_sharing/reader.py)
- Medium vulnerability: RUSTSEC-2026-0285 (python/delta-kernel-rust-sharing-wrapper/Cargo.lock)
- Members sharing a duplicated core (4 members, 50+ identical tokens) (client/src/main/scala/io/delta/sharing/filters/JsonPredicates.scala)
- Off-boarding risk: anonymized user #1
- Outdated: com.amazonaws:aws-java-sdk-bundle
- Outdated: com.azure:azure-storage-blob
- Outdated: com.fasterxml.jackson.core:jackson-core
- Outdated: com.fasterxml.jackson.core:jackson-databind
- Outdated: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
- Outdated: com.google.auth:google-auth-library-oauth2-http
- Outdated: com.google.cloud:google-cloud-storage
- Outdated: com.google.guava:guava
- Outdated: io.delta:delta-kernel-api
- Outdated: io.delta:delta-kernel-defaults
- Outdated: org.apache.hadoop:hadoop-aws
- Outdated: org.apache.hadoop:hadoop-azure
- Outdated: org.apache.hadoop:hadoop-client
- …and 5 more

## Architecture

- Unchanged — 0 containers · 2 contexts · 0 edges