# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 55 → 55 (+0.0)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 94 → 94 (-0.0)
- Architecture 95 → 95 (+0.0)
- Maturity 58 → 58 (+0.0)
- Readiness 61 → 61 (+0.0)
- Security 43 → 43 (+0.0)
- Domain Modelling 70 → 70 (+0.0)

## Resolved (18)

- Duplicated block (10 lines × 2) (ui/src/main/java/com/fibelatti/ui/components/ChipGroup.kt)
- Duplicated block (10 lines × 3) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/PostsDataSourceLinkdingApi.kt)
- Duplicated block (11 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/PostsDataSourceLinkdingApi.kt)
- Duplicated block (11 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/presentation/SearchBookmarksScreen.kt)
- Duplicated block (12 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (14 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/notes/presentation/NoteListScreen.kt)
- Duplicated block (14 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (14 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/presentation/BookmarkDetailsScreen.kt)
- Duplicated block (14 lines × 5) (app/src/main/kotlin/com/fibelatti/pinboard/features/user/presentation/AccountSwitcherScreen.kt)
- Duplicated block (15 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (17 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/BookmarksDao.kt)
- Duplicated block (20 lines × 4) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/BookmarksDao.kt)
- Duplicated block (9 lines × 2) (ui/src/main/java/com/fibelatti/ui/components/ButtonToggleGroup.kt)
- Duplicated block (9 lines × 3) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/TagsDataSourceLinkdingApi.kt)
- High: security finding (details withheld)
- Medium: security finding (details withheld)
- Off-boarding risk: anonymized user #1
- The privacy policy mentions Pinboard and Linkding API tokens but does not state where the user can find those credentials (e.g. in the app settings or via a dedicated docs page) so it is somewhat opaque for someone who needs to retrieve them. (docs/index.md)

## New (17)

- Duplicated block (10 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/PostsDataSourceLinkdingApi.kt)
- Duplicated block (10 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (10 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/presentation/SearchBookmarksScreen.kt)
- Duplicated block (12 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/presentation/BookmarkDetailsScreen.kt)
- Duplicated block (13 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/notes/presentation/NoteListScreen.kt)
- Duplicated block (13 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (13 lines × 5) (app/src/main/kotlin/com/fibelatti/pinboard/features/user/presentation/AccountSwitcherScreen.kt)
- Duplicated block (14 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/posts/data/PostsDataSourceNoApi.kt)
- Duplicated block (16 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/BookmarksDao.kt)
- Duplicated block (19 lines × 4) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/BookmarksDao.kt)
- Duplicated block (8 lines × 2) (ui/src/main/java/com/fibelatti/ui/components/ButtonToggleGroup.kt)
- Duplicated block (8 lines × 3) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/TagsDataSourceLinkdingApi.kt)
- Duplicated block (9 lines × 2) (app/src/main/kotlin/com/fibelatti/pinboard/features/tags/data/TagsDataSourceNoApi.kt)
- Duplicated block (9 lines × 2) (ui/src/main/java/com/fibelatti/ui/components/ChipGroup.kt)
- Duplicated block (9 lines × 3) (app/src/main/kotlin/com/fibelatti/pinboard/features/linkding/data/PostsDataSourceLinkdingApi.kt)
- High: security finding (details withheld)
- Off-boarding risk: anonymized user #1