# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 51 → 57 (+6.3)
- Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

## Lenses

- Code Health 77 → 90 (+13.3)
- Architecture 53 → 53 (-0.9)
- Maturity 52 → 56 (+3.9)
- Readiness 55 → 55 (+0.0)
- Security 46 → 75 (+28.6)

## Resolved (22)

- Duplicated block (14 lines × 2) (Expecto.Sample/Expecto.Sample.fs)
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- No exposed public API
- NoWarnInCsproj (.paket/Paket.Restore.targets)
- NoWarnInCsproj (.paket/Paket.Restore.targets)
- NoWarnInCsproj (.paket/Paket.Restore.targets)
- NoWarnInCsproj (.paket/Paket.Restore.targets)
- Off-boarding risk: anonymized user #1
- Secret: aws-access-token (docs/expecto-patronus.psd)
- Secret: aws-access-token (docs/expecto-patronus.psd)
- …and 2 more

## New (49)

- Documentation: no usage examples (README.md)
- Duplicated block (10 lines × 2) (Expecto/Logging.fs)
- Duplicated block (14 lines × 2) (Expecto/Logging.fs)
- Duplicated block (21–22 lines × 2) (Expecto.FsCheck/FsCheck.fs)
- Duplicated block (23 lines × 2) (Expecto.FsCheck/FsCheck.fs)
- Duplicated block (29–30 lines × 2) (Expecto.Sample/Expecto.Sample.fs)
- Duplicated block (31 lines × 2) (Expecto.FsCheck/FsCheck.fs)
- Duplicated block (5 lines × 2) (Expecto/Expect.fs)
- Duplicated block (5 lines × 2) (Expecto/TestResults.fs)
- Duplicated block (5–6 lines × 2) (Expecto/CSharp.fs)
- Duplicated block (87 lines × 2) (Expecto.FsCheck/FsCheck.fs)
- Duplicated block (9 lines × 2) (Expecto/Expecto.Impl.fs)
- Expect.equalWithDiffPrinter (cognitive 26) (Expecto/Expect.fs)
- ExpectoFsCheckModule.propertyTest (cyclomatic 16) (Expecto.FsCheck/FsCheck.fs)
- ExpectoFsCheckModule.propertyTest (cyclomatic 16) (Expecto.FsCheck3/FsCheck3.fs)
- FileTooLong: Expecto/Expect.fs (Expecto/Expect.fs)
- FileTooLong: Expecto/Expecto.Impl.fs (Expecto/Expecto.Impl.fs)
- FileTooLong: Expecto/Logging.fs (Expecto/Logging.fs)
- High CVE: System.Security.Cryptography.Xml 10.0.7
- High secret: WD-SECRET-0003 (Fuchu.snk)
- …and 29 more

## Architecture

- Containers 0 added · 0 removed · contexts 2 added · 0 removed · edges 0 added · 0 removed

## Added bounded contexts (2)

- Expecto
- Expecto.BenchmarkDotNet