# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 61 → 44 (-16.8)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 81 → 99 (+18.2)
- Architecture 100 → 96 (-4.4)
- Maturity 54 → 55 (+1.4)
- Readiness 59 → 26 (-33.3)
- Security 67 → 48 (-19.0)

## Resolved (37)

- Converter.convert (cognitive 57) (src/Support/Clockwork/Converter.php)
- Converter.convert (cyclomatic 33) (src/Support/Clockwork/Converter.php)
- Coverage not included — suite not readable by the collector
- DatabaseCollectorProvider.__invoke (cognitive 24) (src/CollectorProviders/DatabaseCollectorProvider.php)
- DatabaseCollectorProvider.__invoke (cyclomatic 24) (src/CollectorProviders/DatabaseCollectorProvider.php)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Duplicated block (10 lines × 2) (src/Console/QueriesCommand.php)
- Duplicated block (10 lines × 2) (src/DataCollector/GateCollector.php)
- Duplicated block (11 lines × 2) (src/Console/GetCommand.php)
- Duplicated block (12 lines × 2) (src/DataCollector/RequestCollector.php)
- Duplicated block (12 lines × 2) (src/Support/Clockwork/Converter.php)
- Duplicated block (17 lines × 2) (src/DataCollector/RequestCollector.php)
- Duplicated block (8 lines × 2) (src/Console/FindCommand.php)
- FindCommand.detectIssues (cognitive 19) (src/Console/FindCommand.php)
- FindCommand.detectIssues (cyclomatic 17) (src/Console/FindCommand.php)
- FindCommand.handle (cognitive 42) (src/Console/FindCommand.php)
- FindCommand.handle (cyclomatic 30) (src/Console/FindCommand.php)
- GetCommand.showSummary (cognitive 23) (src/Console/GetCommand.php)
- GetCommand.showSummary (cyclomatic 21) (src/Console/GetCommand.php)
- High vulnerability: [GHSA redacted] (package-lock.json)
- …and 17 more

## New (11)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High: security finding (details withheld)
- High: security finding (details withheld)
- Medium CVE: [GHSA redacted] (package-lock.json)
- No tests found
- Rotate the exposed credentials — git history can't be un-committed
- Secret: generic-api-key (docs/overrides/main.html)
- Secret: generic-api-key (overrides/main.html)

## Changes since last survey

- 2 commits — 2 feature/other, 0 fixes

## By area

- (root) — 1 commit
- src/LaravelDebugbar.php — 1 commit

## Notable commits

- change: Return false when the client IP check fails in isStorageOpen (#2074)
- change: Update CHANGELOG

## Architecture

- Containers 0 added · 0 removed · contexts 0 added · 1 removed · edges 0 added · 0 removed

## Removed bounded contexts (1)

- fruitcake/laravel-debugbar