# Changelog

## Score

- CAI 58 → 45 (-12.1)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 91 → 100 (+8.7)
- Maturity 63 → 59 (-4.4)
- Readiness 32 → 17 (-15.0)
- Security 95 → 85 (-9.6)

## Resolved (8)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- FileTooLong: leanring-buddy/BuddyDictationManager.swift (leanring-buddy/BuddyDictationManager.swift)
- FileTooLong: leanring-buddy/CompanionManager.swift (leanring-buddy/CompanionManager.swift)
- FileTooLong: leanring-buddy/CompanionPanelView.swift (leanring-buddy/CompanionPanelView.swift)
- High vulnerability: [GHSA redacted] (worker/package-lock.json)
- Medium vulnerability: [GHSA redacted] (worker/package-lock.json)
- complexity unreadable for .swift — churn × complexity hotspots could not be measured

## New (20)

- Dimension evaluation failed
- High CVE: [GHSA redacted] (worker/package-lock.json)
- High CVE: [GHSA redacted] (worker/package-lock.json)
- High CVE: [GHSA redacted] (worker/package-lock.json)
- Low CVE: [GHSA redacted] (worker/package-lock.json)
- Low CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- Medium CVE: [GHSA redacted] (worker/package-lock.json)
- No automated tests
- No tests found
- Rotate the exposed credentials — git history can't be un-committed
- Secret: generic-api-key (leanring-buddy/ClickyAnalytics.swift)
- git history depth insufficient