# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 56 → 53 (-3.0)

## Lenses

- Code Health 50 → 49 (-1.0)
- Architecture 86 → 68 (-18.7)
- Maturity 61 → 63 (+2.5)
- Readiness 50 → 49 (-0.8)
- Security 79 → 74 (-4.8)
- Performance 85 → 60 (-25.0)

## Resolved (6)

- High CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- PR-triggered workflow without a permissions block
- Workflow token grant is wider than its jobs use

## New (59)

- AboutPage.renderFooter (cognitive 16) (app/containers/aboutPage/index.js)
- AboutPage.renderFooter (cyclomatic 18) (app/containers/aboutPage/index.js)
- ClassTooLong: LoginPage (app/containers/loginPage/index.js)
- ClassTooLong: Snippet (app/containers/snippet/index.js)
- CodeArea.showMarkdownImageFallback (cognitive 18) (app/containers/codeArea/index.js)
- CodeArea.showMarkdownImageFallback (cyclomatic 19) (app/containers/codeArea/index.js)
- Deprecated: boolean (package-lock.json)
- Deprecated: core-js (package-lock.json)
- Deprecated: eslint (package.json)
- Deprecated: glob (package-lock.json)
- Deprecated: inflight (package-lock.json)
- Deprecated: lodash.isequal (package-lock.json)
- Deprecated: rimraf (package-lock.json)
- Deprecated: rimraf (package-lock.json)
- Deprecated: whatwg-encoding (package-lock.json)
- FileTooLong: loginPage/index.js (app/containers/loginPage/index.js)
- FileTooLong: snippet/index.js (app/containers/snippet/index.js)
- FunctionTooLong: core.createGitLabApi (app/utilities/gitlabApi/core.js)
- High secret: WD-SECRET-0005 (package-lock.json)
- High: security finding (details withheld)
- …and 39 more

## Changes since last survey

- 4 commits — 4 feature/other, 0 fixes

## By area

- (root) — 2 commits
- app/utilities — 2 commits

## Notable commits

- change: Add GitLab snippet provider support (#681)
- change: Add image attachments and code/text file imports to Gists (#680)
- change: Bump the npm_and_yarn group across 1 directory with 6 updates (#683)
- change: Bump vite (#682)