# Changelog

## Score

- CAI 41 → 40 (-1.3)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 60 → 49 (-10.4)
- Architecture 80 → 80 (+0.0)
- Maturity 58 → 53 (-5.2)
- Readiness 32 → 32 (-0.0)
- Security 57 → 66 (+8.9)
- Domain Modelling 48 → 48 (+0.0)
- Accessibility 42 → 40 (-2.4)
- Performance 100 → 100 (+0.0)

## Resolved (1)

- High CVE: [GHSA redacted] (package-lock.json)

## New (48)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (Gemfile.lock)
- Leaked secret: hardcoded-credential (config/settings.yml)
- Orphaned file (app/controllers/admin/fulfillment/orders_controller.rb)
- Orphaned file (app/controllers/admin/fulfillment/shipments_controller.rb)
- Orphaned file (app/controllers/admin/history/addresses_controller.rb)
- Orphaned file (app/controllers/admin/merchandise/products_controller.rb)
- Orphaned file (app/controllers/admin/rma/return_authorizations_controller.rb)
- Orphaned file (app/controllers/admin/shopping/checkout/orders_controller.rb)
- Orphaned file (app/controllers/admin/user_datas/addresses_controller.rb)
- Orphaned file (app/controllers/admin/user_datas/referrals_controller.rb)
- Orphaned file (app/controllers/application_controller.rb)
- Orphaned file (app/controllers/myaccount/addresses_controller.rb)
- Orphaned file (app/controllers/shopping/addresses_controller.rb)
- Orphaned file (app/controllers/shopping/billing_addresses_controller.rb)
- Orphaned file (app/controllers/shopping/cart_items_controller.rb)
- Orphaned file (app/controllers/shopping/orders_controller.rb)
- Orphaned file (app/models/address.rb)
- Orphaned file (app/models/cart.rb)
- …and 28 more

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)