# Changelog

## Score

- CAI 54 → 36 (-18.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 46 → 49 (+3.4)
- Maturity 54 → 50 (-4.6)
- Readiness 54 → 20 (-33.8)
- Security 71 → 65 (-6.3)

## Resolved (12)

- (anonymous) (cognitive 104) (src/main/electron.js)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Further sole-owners (lower concentration)
- LLM evaluation failed
- Off-boarding risk: anonymized user #1
- checkFileContent (cognitive 111) (src/main/electron.js)
- migrateLegacyRecentsOnce (cognitive 16) (src/main/electron.js)
- parseDrawioArgs (cognitive 57) (src/main/args.js)
- processOneFile (cognitive 22) (src/main/electron.js)
- readPdfXml (cognitive 92) (src/main/electron.js)
- renderingFinishHandler (cognitive 25) (src/main/electron.js)

## New (17)

- (anonymous) (cognitive 108) (src/main/electron.js)
- (anonymous) (cognitive 16) (src/main/electron.js)
- Change coupling: args.js ↔ electron.js (src/main/args.js)
- Dimension evaluation failed
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- No artifact signing
- No automated tests
- No tests found
- The README mentions releases but does not link to or describe the GitHub Actions workflow that actually builds and publishes binaries. (README.md)
- addDiagramAnnotations (cognitive 24) (src/main/electron.js)
- checkFileContent (cognitive 197) (src/main/electron.js)
- migrateLegacyRecentsOnce (cognitive 17) (src/main/electron.js)
- parseDrawioArgs (cognitive 58) (src/main/args.js)
- processOneFile (cognitive 24) (src/main/electron.js)
- readPdfXml (cognitive 93) (src/main/electron.js)
- renderingFinishHandler (cognitive 27) (src/main/electron.js)