# Changelog

## Score

- CAI 61 → 48 (-13.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 87 → 89 (+1.4)
- Maturity 55 → 55 (+0.0)
- Readiness 58 → 31 (-27.0)
- Security 70 → 69 (-0.6)

## Resolved (7)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- High CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium vulnerability: [GHSA redacted] (package-lock.json)
- PR-triggered workflow without a permissions block
- The document begins with an excellent overview and contrasts CLI vs MCP before diving into requirements and getting started, then clips mid-installation ('First... install the Playwright MCP server with your client.') (README.md)

## New (11)

- Dimension evaluation failed
- High CVE: [GHSA redacted] (package-lock.json)
- Low CVE: [GHSA redacted] (package-lock.json)
- Low IaC: DS-0026 (Dockerfile)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- No automated tests
- No tests found
- The Getting started section begins and clips mid-sentence ('First...install the Playwright MCP server with your client.') before covering how to run the standalone MCP server or configure a config file. (README.md)

## Changes since last survey

- 7 commits — 7 feature/other, 0 fixes

## By area

- (root) — 6 commits
- .azure-pipelines/publish.yml — 1 commit

## Notable commits

- change: chore(deps): bump @hono/node-server and @modelcontextprotocol/sdk (#1702)
- change: chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 (#1692)
- change: chore(deps-dev): bump hono from 4.12.26 to 4.12.31 (#1687)
- change: chore(deps-dev): bump ip-address from 10.2.0 to 10.4.0 (#1703)
- change: chore: mark v0.0.79 (#1707)
- change: chore: roll Playwright to 1.63.0-alpha-2026-08-05 (#1706)
- change: devops: add ESRP pipeline for publishing npm alpha versions (#1709)