# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 61 → 60 (-0.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 68 → 68 (+0.0)
- Architecture 98 → 98 (+0.0)
- Maturity 64 → 64 (+0.1)
- Readiness 69 → 69 (+0.0)
- Security 55 → 52 (-3.7)
- Performance 62 → 73 (+11.0)

## Resolved (38)

- Ambiguous naming for time advancement. 'AdvanceToMs' implies jumping to an absolute time, while 'AdvanceByMs' implies adding a duration. However, both accept a 'milliseconds' parameter, which is ambiguous (is it absolute or relative?). Furthermore, standard Rx testing APIs often use 'Advance' for relative and 'SetTime' or similar for absolute, or clearly distinguish 'To' vs 'By'. The current naming is slightly confusing as 'Advance' is used for both concepts.
- No assertions: TargetObject_WhenSet_UsedInsteadOfAssociatedObject (src/tests/ReactiveUI.Wpf.Tests/Wpf/FollowObservableStateBehaviorTests.cs)
- Off-boarding risk: anonymized user #1
- Split ReactiveUI
- Split ReactiveUI.Reactive
- The What-is-ReactiveUI section links out to 'Get Started', 'Install Packages', and 'Samples' but the README itself does not give a one-line summary of what ReactiveUI is for readers who skim it. (README.md)
- XML-doc coverage: ReactiveUI(net8.0) (src/ReactiveUI/ReactiveUI.csproj)
- XML-doc coverage: ReactiveUI.AndroidX(net10.0-android36.0) (src/ReactiveUI.AndroidX/ReactiveUI.AndroidX.csproj)
- XML-doc coverage: ReactiveUI.AndroidX.Reactive(net10.0-android36.0) (src/ReactiveUI.AndroidX.Reactive/ReactiveUI.AndroidX.Reactive.csproj)
- XML-doc coverage: ReactiveUI.Benchmarks(net8.0) (src/benchmarks/ReactiveUI.Benchmarks/ReactiveUI.Benchmarks.csproj)
- XML-doc coverage: ReactiveUI.Benchmarks.Reactive(net8.0) (src/benchmarks/ReactiveUI.Benchmarks.Reactive/ReactiveUI.Benchmarks.Reactive.csproj)
- XML-doc coverage: ReactiveUI.Blazor(net8.0) (src/ReactiveUI.Blazor/ReactiveUI.Blazor.csproj)
- XML-doc coverage: ReactiveUI.Blazor.Reactive(net8.0) (src/ReactiveUI.Blazor.Reactive/ReactiveUI.Blazor.Reactive.csproj)
- XML-doc coverage: ReactiveUI.Blend(net462) (src/ReactiveUI.Blend/ReactiveUI.Blend.csproj)
- XML-doc coverage: ReactiveUI.Blend.Reactive(net462) (src/ReactiveUI.Blend.Reactive/ReactiveUI.Blend.Reactive.csproj)
- XML-doc coverage: ReactiveUI.Builder.BlazorServer (src/examples/ReactiveUI.Builder.BlazorServer/ReactiveUI.Builder.BlazorServer.csproj)
- XML-doc coverage: ReactiveUI.Builder.WpfApp(net462) (src/examples/ReactiveUI.Builder.WpfApp/ReactiveUI.Builder.WpfApp.csproj)
- XML-doc coverage: ReactiveUI.Core(net8.0) (src/ReactiveUI.Core/ReactiveUI.Core.csproj)
- XML-doc coverage: ReactiveUI.Drawing(net8.0) (src/ReactiveUI.Drawing/ReactiveUI.Drawing.csproj)
- XML-doc coverage: ReactiveUI.Drawing.Reactive(net8.0) (src/ReactiveUI.Drawing.Reactive/ReactiveUI.Drawing.Reactive.csproj)
- …and 18 more

## New (6)

- High: security finding (details withheld)
- LLM evaluation failed
- No assertions: AppBuilderTestAsync_HandlesTaskCompletedTask (src/tests/ReactiveUI.Testing.Tests/RxTestTests.cs)
- Off-boarding risk: anonymized user #1
- Projects may be oversized for their cohesion
- redundant comment (src/Polyfills/IsExternalInit.cs)

## Changes since last survey

- 3 commits — 2 feature/other, 1 fixes

## By area

- .github/renovate.json — 1 commit
- src/ReactiveUI.Testing — 1 commit
- src/tests — 1 commit

## Notable commits

- fix: fix(testing): restore .NET Framework targets for the testing packages (#4427)
- change: build: update nuget package dependencies (#4426)
- change: chore(renovate): group related dependency cohorts (#4423)

## Architecture

- Unchanged — 0 containers · 1 contexts · 0 edges