# Changelog

## Score

- CAI 39 → 33 (-5.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 65 → 49 (-16.0)
- Maturity 49 → 59 (+10.3)
- Readiness 27 → 20 (-7.4)
- Security 48 → 42 (-6.0)

## Resolved (21)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Dormant codebase
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- Largest orphaned file (src/nginxconfig/generators/conf/website.conf.js)
- Largest orphaned file (src/nginxconfig/templates/domain_sections/https.vue)
- Largest orphaned file (src/nginxconfig/templates/global_sections/https.vue)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- PR-triggered workflow without a permissions block
- …and 1 more

## New (31)

- Change coupling: certbot.vue ↔ ssl.vue (src/nginxconfig/templates/setup_sections/certbot.vue)
- Change coupling: https.js ↔ https.vue (src/nginxconfig/i18n/en/templates/domain_sections/https.js)
- Change coupling: https.js ↔ https.vue (src/nginxconfig/i18n/en/templates/global_sections/https.js)
- Dimension evaluation failed
- FileTooLong: conf/website.conf.js (src/nginxconfig/generators/conf/website.conf.js)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- …and 11 more