# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 63 → 63 (+0.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 97 → 74 (-22.7)
- Architecture 88 → 90 (+1.9)
- Maturity 56 → 54 (-1.8)
- Readiness 51 → 61 (+9.8)
- Security 85 → 82 (-3.2)
- Performance 89 → 89 (+0.0)

## Resolved (2)

- Off-boarding risk: anonymized user #1
- Workflow token permissions not restricted

## New (43)

- High: security finding (details withheld)
- Off-boarding risk: anonymized user #1
- Orphaned file (benchmark/src/main/scala/bench/CodeGen.scala)
- Orphaned file (benchmark/src/main/scala/bench/CollectionSource.scala)
- Orphaned file (benchmark/src/main/scala/bench/Operations.scala)
- Orphaned file (benchmark/src/main/scala/bench/ParseJmhLog.scala)
- Orphaned file (project/CodeGen.scala)
- Orphaned file (project/WrapFnGen.scala)
- Orphaned file (src/main/java-2.13+/scala/compat/java8/ScalaStreamSupport.java)
- Orphaned file (src/main/java-2.13-/scala/compat/java8/runtime/CollectionInternals.java)
- Orphaned file (src/main/scala-2.11/scala/compat/java8/runtime/LambdaDeserializer.scala)
- Orphaned file (src/main/scala-2.13+/scala/compat/java8/converterImpl/StepperExtensions.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/StreamConverters.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/collectionImpl/Accumulator.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/collectionImpl/DoubleAccumulator.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/collectionImpl/IntAccumulator.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/collectionImpl/LongAccumulator.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/converterImpl/MakesSteppers.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/converterImpl/StepConverters.scala)
- Orphaned file (src/main/scala-2.13-/scala/compat/java8/converterImpl/StepsArray.scala)
- …and 23 more

## Changes since last survey

- 4 commits — 4 feature/other, 0 fixes

## By area

- .github/workflows — 3 commits
- .github/dependabot.yml — 1 commit

## Notable commits

- change: Add dependabot.yml
- change: Bump actions/checkout from 4 to 7
- change: Bump actions/setup-java from 4 to 6
- change: Bump coursier/cache-action from 6 to 8

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)