# Changelog

## Score

- CAI 38 → 39 (+0.8)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 45 → 45 (+0.0)
- Architecture 69 → 69 (+0.0)
- Maturity 56 → 63 (+6.6)
- Readiness 19 → 19 (+0.0)
- Security 89 → 86 (-2.7)

## Resolved (2)

- Medium CVE: [GHSA redacted] (api/package-lock.json)
- early-stage repository — too few commits for a meaningful bus factor

## New (3)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (api/package-lock.json)
- single-maintainer — knowledge-concentration (bus factor) risk