# Changelog

## Score

- CAI 50 → 43 (-7.0)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 49 → 52 (+2.9)
- Maturity 49 → 54 (+4.5)
- Readiness 43 → 30 (-13.4)
- Security 70 → 70 (+0.0)

## Resolved (20)

- (anonymous) (cognitive 20) (underscore-umd.js)
- (anonymous) (cognitive 20) (underscore.js)
- Change coupling clique: isEqual.js, underscore-esm.js, underscore-node-f.cjs, underscore-umd.js (modules/isEqual.js)
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Further orphaned files (smaller)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Off-boarding risk: anonymized user #1
- The module's source code appears in the modules directory but no corresponding entry in the main docs site (underscore-esm.html) explains what _baseCreate does or how it is used. (docs/modules/_baseCreate.js)
- isEqual (cognitive 93) (modules/isEqual.js)
- isEqual (cognitive 93) (underscore-esm.js)
- isEqual (cognitive 93) (underscore-node-f.cjs)
- isEqual (cognitive 93) (underscore-umd.js)
- isEqual (cognitive 93) (underscore.js)

## New (40)

- (anonymous) (cognitive 23) (underscore-umd.js)
- (anonymous) (cognitive 23) (underscore.js)
- Change coupling: index.js ↔ underscore-node.cjs (modules/index.js)
- Change coupling: underscore-esm-min.js ↔ underscore-umd-min.js (underscore-esm-min.js)
- Change coupling: underscore-esm.js ↔ underscore-node-f.cjs (underscore-esm.js)
- Change coupling: underscore-esm.js ↔ underscore-node.mjs (underscore-esm.js)
- Change coupling: underscore-esm.js ↔ underscore-umd.js (underscore-esm.js)
- Change coupling: underscore-node-f.cjs ↔ underscore-node.cjs (underscore-node-f.cjs)
- Change coupling: underscore-node-f.cjs ↔ underscore-node.mjs (underscore-node-f.cjs)
- Change coupling: underscore-node-f.cjs ↔ underscore-umd.js (underscore-node-f.cjs)
- Change coupling: underscore-node.cjs ↔ underscore-node.mjs (underscore-node.cjs)
- Change coupling: underscore-node.mjs ↔ underscore-umd.js (underscore-node.mjs)
- Critical CVE: [GHSA redacted] (package-lock.json)
- Dimension evaluation failed
- FileTooLong: ./underscore-umd.js (underscore-umd.js)
- FileTooLong: ./underscore.js (underscore.js)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- …and 20 more