# Changelog

## Score

- CAI 63 → 65 (+2.4)
- Rubric changed (rubric-2026.09.9 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 86 → 86 (+0.1)
- Architecture 100 → 95 (-5.1)
- Maturity 59 → 53 (-5.4)
- Readiness 76 → 72 (-4.6)
- Security 50 → 67 (+16.2)
- Event Sourcing 100 → 100 (+0.0)
- Performance 100 (new)

## Resolved (6)

- Documentation: no licence statement (README.md)
- Duplicated block (13 lines × 3) (src/command.rs)
- Duplicated block (5 lines × 2) (src/queue.rs)
- Duplicated block (9 lines × 2) (src/command.rs)
- Hotspot: src/commands.rs (src/commands.rs)
- Off-boarding risk: anonymized user #1

## New (12)

- Banned license: ansi_colours
- CommandManager::register_keybinding (cognitive 18) (src/commands.rs)
- Duplicated block (10 lines × 2) (src/command.rs)
- Duplicated block (14 lines × 3) (src/command.rs)
- FileTooLong: src/commands.rs (src/commands.rs)
- Low cohesion: Track (LCOM4 7) (src/model/track.rs)
- Low cohesion: WebApi (LCOM4 7) (src/spotify_api.rs)
- Medium vulnerability: RUSTSEC-2026-0285 (Cargo.lock)
- Off the main sequence: ncspot
- Off-boarding risk: anonymized user #1
- Outdated: notify-rust
- TodoComment (src/ui/layout.rs)

## Changes since last survey

- 7 commits — 7 feature/other, 0 fixes

## By area

- (root) — 5 commits
- src/authentication.rs — 1 commit
- src/ui — 1 commit

## Notable commits

- change: chore(deps): bump rand in the cargo group across 1 directory
- change: chore(deps): bump the cargo group across 1 directory with 5 updates
- change: chore: replace notifications instead of stack
- change: feat: Add a unified proxy configuration option
- change: feat: support Vim-style numeric count prefixes for keybindings
- change: feat: vim-style command completion
- change: refactor(auth): Separate ncspot from Spotify login