# Changelog

## Score

- CAI 34 → 34 (+0.5)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 60 → 59 (-0.2)
- Architecture 81 → 84 (+2.9)
- Maturity 53 → 53 (+0.0)
- Readiness 18 → 18 (+0.0)
- Security 54 → 59 (+5.1)
- Accessibility 38 → 38 (+0.0)

## Resolved (2)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (README.md)

## New (5)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (the committed lockfile is in a format this engine cannot resolve)
- End-of-life framework: AngularJS 1
- Medium CVE: [GHSA redacted] (package-lock.json)
- taskStatus.angular.module("ariaNg").filter("taskStatus") (cognitive 22) (src/scripts/filters/taskStatus.js)
- taskStatus.angular.module("ariaNg").filter("taskStatus") (cyclomatic 17) (src/scripts/filters/taskStatus.js)