# Changelog

## Score

- CAI 54 → 44 (-9.7)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 95 → 79 (-15.9)
- Maturity 58 → 59 (+0.8)
- Readiness 67 → 40 (-26.7)
- Security 40 → 37 (-2.9)

## Resolved (12)

- Change coupling: asset.ts ↔ post.ts (lib/plugins/processor/asset.ts)
- Change coupling: asset_link.ts ↔ asset_path.ts (lib/plugins/tag/asset_link.ts)
- Change coupling: category.ts ↔ tag.ts (lib/models/category.ts)
- Change coupling: css.ts ↔ js.ts (lib/plugins/helper/css.ts)
- Change coupling: page.ts ↔ post.ts (lib/models/page.ts)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Further orphaned files (smaller)
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block

## New (36)

- Dimension evaluation failed
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Hotspot: lib/plugins/processor/post.ts (lib/plugins/processor/post.ts)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- …and 16 more

## Changes since last survey

- 2 commits — 1 feature/other, 1 fixes

## By area

- lib/plugins — 2 commits

## Notable commits

- fix: fix: reprocess future posts after publish date (#5782)
- change: perf(generate): avoid concatenating a single buffer (#5806)