# Changelog

## Score

- CAI 61 → 67 (+5.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 71 → 71 (+0.0)
- Architecture 81 → 81 (+0.0)
- Maturity 87 → 87 (+0.0)
- Readiness 75 → 75 (+0.0)
- Security 46 → 59 (+12.4)

## Resolved (15)

- High CVE: Microsoft.AspNetCore.Identity 2.0.0
- High CVE: Microsoft.AspNetCore.Identity 2.0.0
- High CVE: Microsoft.AspNetCore.Server.Kestrel.Core 2.0.0
- High CVE: System.Net.Security 4.3.0
- High CVE: System.Net.Security 4.3.0
- High CVE: System.Security.Cryptography.Xml 4.4.0
- High CVE: System.Security.Cryptography.Xml 4.4.0
- Inconsistent naming for the Name concept: 'Customer.Name' (property on Customer) vs 'Name' (a ValueObject). While one is a property and one is a type, the property name 'Name' on the entity mirrors the ValueObject name, which can be confusing. More importantly, the ValueObject is named 'Name', which is a very generic name compared to 'CustomerName' or 'PersonName'.
- Inconsistent naming for the same concept: 'CustomerDetailsModel' vs 'CustomerModel'. Both types appear to represent customer data in the WebApi layer, but use different suffixes ('Details' vs none) and potentially different structures.
- Medium CVE: Microsoft.AspNetCore.All 2.0.0
- Medium CVE: Microsoft.AspNetCore.All 2.0.0
- Medium CVE: System.Net.Security 4.3.0
- Medium CVE: System.Net.Security 4.3.0
- redundant comment (test/Manga.Domain.Tests/AccountTests.cs)
- redundant comment (test/Manga.Domain.Tests/AccountTests.cs)

## New (14)

- High CVE: Microsoft.AspNetCore.Identity 2.0.0
- High CVE: Microsoft.AspNetCore.Identity 2.0.0
- High CVE: Microsoft.AspNetCore.Server.Kestrel.Core 2.0.0
- High CVE: System.Net.Security 4.3.0
- High CVE: System.Net.Security 4.3.0
- High CVE: System.Security.Cryptography.Xml 4.4.0
- High CVE: System.Security.Cryptography.Xml 4.4.0
- Inconsistent naming for the Swedish Personal Identity Number. The domain model uses 'SSN' (Social Security Number), while the API/UseCase layer uses 'Personnummer' (Swedish term). Additionally, the domain model exposes 'Name' directly, while the API layer wraps it in a 'CustomerDetailsModel' or 'CustomerModel'.
- Inconsistent naming for the customer's name property. The application layer uses 'CustomerOutput', while the API layer uses 'CustomerDetailsModel' and 'CustomerModel'. The property name 'Name' is consistent, but the container types differ significantly.
- Medium CVE: Microsoft.AspNetCore.All 2.0.0
- Medium CVE: Microsoft.AspNetCore.All 2.0.0
- Medium CVE: System.Net.Security 4.3.0
- Medium CVE: System.Net.Security 4.3.0
- redundant comment (test/Manga.Domain.Tests/AccountTests.cs)

## API surface

- Unchanged — 6 HTTP endpoints

## Architecture

- Unchanged — 2 containers · 1 contexts · 0 edges