# Changelog

## Score

- CAI 28 → 39 (+11.0)

## Lenses

- Code Health 51 (new)
- Architecture 77 (new)
- Maturity 13 → 55 (+42.0)
- Readiness 15 → 54 (+38.7)
- Security 100 → 19 (-80.6)
- Domain Modelling 74 (new)
- Event-Driven 82 (new)
- Performance 66 (new)

## Resolved (8)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No exposed public API
- No tests found
- Test reliability not included
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (201)

- Bounded contexts not declared
- CommentedOutCode (samples/Monolith/NBB.Mono/Program.cs)
- CommentedOutCode (src/Core/NBB.Core.DependencyInjection/ReflectionExtensions.cs)
- CommentedOutCode (test/Benchmarks/EventStoreBenchmarks/Program.cs)
- CommentedOutCode (test/UnitTests/Messaging/NBB.Messaging.InProcessMessaging.Tests/InProcessMessagingTests.cs)
- Deprecated: STAN.Client
- Deprecated: xunit
- Dormant codebase
- Duplicated block (12 lines × 2) (samples/Orchestration/ProcessManagerSample/OrderProcessManager.cs)
- Duplicated block (17 lines × 2) (src/Core/NBB.Core.DependencyInjection/ReflectionExtensions.cs)
- Duplicated block (19 lines × 2) (src/Core/NBB.Core.Abstractions/TypeExtensions.cs)
- Duplicated block (19 lines × 2) (src/Core/NBB.Core.DependencyInjection/ReflectionExtensions.cs)
- Duplicated block (19 lines × 2) (src/Core/NBB.Core.DependencyInjection/ReflectionExtensions.cs)
- Duplicated block (23 lines × 2) (src/Core/NBB.Core.DependencyInjection/ReflectionExtensions.cs)
- Duplicated block (9 lines × 3) (samples/MicroServices/NBB.Contracts/NBB.Contracts.Migrations/Program.cs)
- EmptyCatchBlock (src/EventStore/NBB.EventStore.AdoNet.Migrations/AdoNetEventStoreDatabaseMigrator.cs)
- High CVE: AutoMapper 14.0.0
- High CVE: Microsoft.OpenApi 2.3.0
- High CVE: System.Security.Cryptography.Xml 9.0.0
- High CVE: System.Security.Cryptography.Xml 9.0.0
- …and 181 more

## API surface

- 14 added · 0 removed (a removed endpoint is potentially breaking)

## Added endpoints (14)

- GET /api/contracts
- GET /api/contracts/{id}
- GET /api/invoices
- GET /api/invoices/{InvoiceId}
- GET /api/payables
- GET /api/payables/{id}
- GET /api/todo
- POST /api/contracts
- POST /api/contracts/{id}/lines
- POST /api/contracts/{id}/validate
- POST /api/invoices
- POST /api/invoices/{InvoiceId}/process
- POST /api/payables/{id}/pay
- POST /api/todo