# Changelog

## Score

- CAI 58 → 62 (+3.3)
- Rubric changed (rubric-2026.09.15 → rubric-2026.10.1) — scores are not directly comparable.

## Lenses

- Code Health 98 → 99 (+0.5)
- Architecture 87 → 95 (+7.6)
- Maturity 58 → 59 (+1.5)
- Readiness 48 → 50 (+2.2)
- Security 66 → 68 (+2.0)
- Performance 100 (new)

## Resolved (29)

- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Further sole-owners (lower concentration)
- High CVE: [GHSA redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Off-boarding risk: anonymized user #1
- Outdated: burrito
- Outdated: dialyxir
- Outdated: ex_doc
- Outdated: membrane_core
- Outdated: membrane_ffmpeg_swscale_plugin
- Outdated: membrane_hackney_plugin
- Outdated: membrane_mp4_plugin
- Outdated: membrane_ogg_plugin
- Outdated: membrane_portaudio_plugin
- Outdated: membrane_realtimer_plugin
- Outdated: membrane_rtp_aac_plugin
- …and 9 more

## New (2)

- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Off-boarding risk: anonymized user #1

## Changes since last survey

- 3 commits — 3 feature/other, 0 fixes

## By area

- lib/boombox — 2 commits
- .github/workflows — 1 commit

## Notable commits

- change: Update to new Transcoder API. Release v0.3.0 (#147)
- change: Use the same 4 vCPU machine for release workflow that is used on regular CI (#151)
- change: feat(rtsp): allow configuring the RTSP transport (#148)

## Architecture

- Unchanged — 0 containers · 1 contexts · 0 edges