# Changelog

## Score

- CAI 66 → 67 (+0.8)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 75 → 75 (+0.0)
- Architecture 94 → 96 (+1.2)
- Maturity 61 → 61 (+0.1)
- Readiness 62 → 64 (+1.8)
- Security 75 → 78 (+3.2)

## Resolved (6)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no usage examples (README.md)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- Hotspot: lib/DraggableCore.tsx (lib/DraggableCore.tsx)
- Off-boarding risk: anonymized user #1

## New (5)

- Documentation: no project overview (README.md)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- High CVE: [GHSA redacted] (yarn.lock)
- Off-boarding risk: anonymized user #1

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- .out-of-scope/auto-scroll.md — 1 commit

## Notable commits

- change: docs: record out-of-scope feature requests from issue triage (#824)