# Changelog

## Score

- CAI 47 → 47 (+0.4)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 27 → 27 (+0.0)
- Architecture 100 → 100 (+0.0)
- Maturity 61 → 61 (+0.0)
- Readiness 54 → 55 (+1.5)
- Security 90 → 90 (+0.7)

## Resolved (18)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (README.md)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- _createFrame (cyclomatic 17) (src/js/treemode.js)
- _findOneSchema (cyclomatic 24) (src/js/Node.js)
- _onChange (cognitive 24) (src/js/treemode.js)
- _onChange (cyclomatic 17) (src/js/treemode.js)
- _onEvent (cyclomatic 32) (src/js/treemode.js)
- _onKeyDown (cognitive 28) (src/js/treemode.js)
- _onKeyDown (cyclomatic 27) (src/js/treemode.js)
- create (cyclomatic 24) (src/js/previewmode.js)
- create (cyclomatic 38) (src/js/textmode.js)
- expand (cognitive 16) (src/js/treemode.js)
- registerMode (cognitive 19) (src/js/JSONEditor.js)
- setSchema (cognitive 22) (src/js/JSONEditor.js)
- validate (cognitive 17) (src/js/textmode.js)

## New (29)

- FileTooLong: js/treemode.js (src/js/treemode.js)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- JSONEditor.JSONEditor.registerMode (cognitive 19) (src/js/JSONEditor.js)
- JSONEditor.JSONEditor.setSchema (cognitive 22) (src/js/JSONEditor.js)
- Node.Node._findOneSchema (cyclomatic 24) (src/js/Node.js)
- Outdated (npm): ajv
- Outdated (npm): jsoneditor
- Outdated (npm): react
- Outdated (npm): react-dom
- previewmode.previewmode.create (cyclomatic 24) (src/js/previewmode.js)
- selectr.Selectr.add (cognitive 26) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.bindEvents (cognitive 112) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.bindEvents (cyclomatic 65) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.search (cognitive 27) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.select (cognitive 20) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.setSelected (cognitive 33) (src/js/assets/selectr/selectr.js)
- selectr.Selectr.setSelected (cyclomatic 26) (src/js/assets/selectr/selectr.js)
- …and 9 more