# Changelog

## Score

- CAI 62 → 61 (-1.2)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 78 → 99 (+21.3)
- Architecture 69 → 69 (+0.0)
- Maturity 69 → 65 (-3.6)
- Readiness 50 → 50 (-0.5)
- Security 98 → 76 (-21.3)

## Resolved (4)

- Duplicated block (13 lines × 2) (lib/webauthn_components/config/public_key_options.ex)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Outdated: lazy_html
- TodoComment (test/webauthn_components/authentication_component_test.exs)

## New (4)

- Duplicated block (13 lines × 2) (lib/webauthn_components/allow_credential.ex)
- Duplicated block (13 lines × 2) (lib/webauthn_components/public_key_credential_creation_options.ex)
- Duplicated block (5 lines × 2) (lib/webauthn_components/public_key_credential_request_options.ex)
- Duplicated block (6 lines × 2) (lib/webauthn_components/authenticator_selection.ex)

## Changes since last survey

- 7 commits — 5 feature/other, 2 fixes

## By area

- (root) — 3 commits
- lib/webauthn_components — 3 commits
- priv/static — 1 commit

## Notable commits

- fix: Fix base64 encoding & decoding inconsistencies (#113)
- fix: Fix mermaid rendering
- change: Consolidate JS hooks into `webauthn_hooks.js` (#114)
- change: Documentation (#112)
- change: Refactor `AuthenticationComponent` (#111)
- change: Update dependencies
- change: Update mermaid version for hex docs