# Changelog

## Score

- CAI 45 → 46 (+1.8)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 36 → 36 (+0.0)
- Architecture 81 → 79 (-2.6)
- Maturity 58 → 58 (-0.5)
- Readiness 51 → 48 (-3.0)
- Security 46 → 56 (+9.7)
- Performance 79 (new)

## Resolved (6)

- Documentation: no architecture or design documentation (README.md)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Hotspot: packages/less/test/less-test.js (packages/less/test/less-test.js)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Off-boarding risk: anonymized user #1

## New (7)

- End-of-life runtime: Node.js 18
- Low cohesion: Node (LCOM4 5) (packages/less/lib/less/tree/node.js)
- Low cohesion: PluginManager (LCOM4 4) (packages/less/lib/less/plugin-manager.js)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (pnpm-lock.yaml)
- Off-boarding risk: anonymized user #1
- Projects may be oversized for their cohesion