# Changelog

## Score

- CAI 55 → 56 (+0.9)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 54 → 54 (+0.0)
- Architecture 92 → 94 (+1.2)
- Maturity 54 → 52 (-2.6)
- Readiness 50 → 49 (-0.8)
- Security 68 → 79 (+10.8)
- Performance 100 (new)

## Resolved (5)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (docs/deploying/bluemix.md)
- Documentation: no installation or build instructions (docs/deploying/unix.md)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Off-boarding risk: anonymized user #1

## New (2)

- Off-boarding risk: anonymized user #1
- Orphaned knowledge (src/CommandBus.mjs)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- (root) — 1 commit

## Notable commits

- change: chore(deps): bump qs from 6.15.2 to 6.16.0 (#1837)