# Changelog

## Score

- CAI 51 → 51 (+0.2)
- Rubric changed (rubric-2026.09.15 → rubric-2026.10.1) — scores are not directly comparable.

## Lenses

- Code Health 68 → 69 (+1.2)
- Architecture 99 → 92 (-7.0)
- Maturity 55 → 55 (+0.0)
- Readiness 84 → 84 (+0.3)
- Security 81 → 83 (+2.1)
- Accessibility 34 → 34 (+0.0)

## Resolved (3)

- Documentation: no installation or build instructions (README.md)
- Duplicated block (6 lines × 3) (lib/phoenix_storybook/live/story/component_iframe_live.ex)
- Off-boarding risk: anonymized user #1

## New (7)

- Duplicated block (7 lines × 3) (lib/phoenix_storybook/live/story/component_iframe_live.ex)
- High CVE: [GHSA redacted] (assets/package-lock.json)
- Medium CVE: EEF-[CVE redacted] (mix.lock)
- Off-boarding risk: anonymized user #1
- Outdated: lazy_html
- Outdated: mdex
- Projects may be oversized for their cohesion

## Changes since last survey

- 2 commits — 2 feature/other, 0 fixes

## By area

- (root) — 1 commit
- assets/package-lock.json — 1 commit

## Notable commits

- change: chore(deps): bump phoenix from 1.8.13 to 1.8.14
- change: chore(deps-dev): bump @biomejs/biome from 2.5.13 to 2.5.14 in /assets