# Changelog

## Score

- CAI 63 → 62 (-1.2)

## Lenses

- Code Health 71 → 72 (+1.1)
- Architecture 69 → 69 (+0.0)
- Maturity 86 → 88 (+2.2)
- Readiness 75 → 68 (-7.1)
- Security 70 → 66 (-3.9)
- Accessibility 54 → 54 (+0.0)

## Resolved (3)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)

## New (6)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Leaked secret: hardcoded-credential (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- No SBOM
- Workflow token permissions not restricted (.github/workflows/build-dist.yml)