# Changelog

## Score

- CAI 61 → 56 (-4.6)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 72 → 72 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 41 → 31 (-9.8)
- Readiness 75 → 75 (+0.0)
- Security 81 → 81 (-0.4)
- Performance 100 → 100 (+0.0)

## Resolved (4)

- Documentation: no project overview (docs/ja/05-configuration.md)
- High CVE: [GHSA redacted] (project/Dependencies.scala)
- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted

## New (6)

- Critical CVE: [GHSA redacted] (project/Dependencies.scala)
- Documentation: no installation or build instructions (README.markdown)
- Documentation: no usage examples (docs/00.md)
- Off-boarding risk: anonymized user #1
- Orphaned file (asynchttpclient/src/main/scala/gigahorse/support/asynchttpclient/WebSocketListener.scala)
- Workflow token permissions not restricted (.github/workflows/ci.yml)
