# Changelog

## Score

- CAI 43 → 46 (+2.9)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 75 → 75 (+0.0)
- Architecture 86 → 88 (+1.4)
- Maturity 48 → 48 (+0.0)
- Readiness 31 → 33 (+2.1)
- Security 49 → 61 (+12.8)

## Resolved (5)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions
- High CVE: [GHSA redacted] (demo-docs-website/package-lock.json)
- High CVE: [GHSA redacted] (demo-docs-website/package-lock.json)
- Medium CVE: [GHSA redacted] (demo-docs-website/package-lock.json)

## New (15)

- High CVE: [CVE redacted] (demo-docs-website/package-lock.json)
- High CVE: [GHSA redacted] (demo-docs-website/package-lock.json)
- High CVE: [GHSA redacted] (demo-docs-website/package-lock.json)
- Outdated (npm): @docsearch/react
- Outdated (npm): @docusaurus/core
- Outdated (npm): @docusaurus/plugin-google-gtag
- Outdated (npm): @docusaurus/preset-classic
- Outdated (npm): @docusaurus/theme-live-codeblock
- Outdated (npm): @mdx-js/react
- Outdated (npm): clsx
- Outdated (npm): photoswipe-deep-zoom-plugin
- Outdated (npm): photoswipe-dynamic-caption-plugin
- Outdated (npm): prism-react-renderer
- Outdated (npm): react
- Outdated (npm): react-dom