# Changelog

## Score

- CAI 44 → 41 (-3.1)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 52 → 59 (+7.1)
- Maturity 47 → 55 (+8.0)
- Readiness 33 → 25 (-8.3)
- Security 68 → 56 (-12.1)

## Resolved (3)

- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Off-boarding risk: anonymized user #1
- PR-triggered workflow without a permissions block

## New (15)

- Dimension evaluation failed
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- No SBOM
- The Contents outline lists Status, Features, Description, Use Cases, Useful Links sections, but the visible text does not cover any of them. (.github/README.md)
- isPrivateTarget (cognitive 17) (api/_common/check-skipper.js)
- isPrivateTarget (cyclomatic 18) (api/_common/check-skipper.js)
- parseResult (cognitive 18) (api/security-txt.js)

## Changes since last survey

- 5 commits — 5 feature/other, 0 fixes

## By area

- .github/README.md — 2 commits
- public/assets — 2 commits
- (root) — 1 commit

## Notable commits

- change: Add Render to the self-hosted 1-click deploy options.
- change: Adds Nubela NinjaPear sponsorship placement into readme
- change: Bump version to 2.2.2
- change: Merge pull request #331 from ojusave/add-render-self-hosted-button
- change: Modify sponsorship link for nubela