# Changelog

## Score

- CAI 45 → 52 (+7.2)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 87 → 87 (+0.0)
- Architecture 100 → 84 (-16.3)
- Maturity 69 → 74 (+4.8)
- Readiness 59 → 51 (-7.7)
- Security 30 → 51 (+20.8)
- Event-Driven 45 → 45 (+0.0)

## Resolved (2)

- Coverage not measured — no coverage collector is wired up
- Off-boarding risk: anonymized user #1

## New (21)

- Floating source dependency: bbmustache
- Floating source dependency: clique
- Floating source dependency: e2qc
- Floating source dependency: erlang_lorawan
- Floating source dependency: erlang_v8
- Floating source dependency: grpcbox
- Floating source dependency: helium_proto
- Floating source dependency: httpc_aws
- Floating source dependency: iso8601
- Floating source dependency: router_utils
- High CVE: [GHSA redacted] (rebar.lock)
- High CVE: [GHSA redacted] (rebar.lock)
- Medium CVE: [GHSA redacted] (rebar.lock)
- Off-boarding risk: anonymized user #1
- Outdated: erl_cidr
- Outdated: hackney
- Outdated: meck
- Outdated: observer_cli
- Outdated: prometheus
- Outdated: websocket_client
- …and 1 more