# Changelog

## Score

- CAI 44 → 46 (+2.2)
- Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 72 → 73 (+1.8)
- Architecture 100 → 79 (-21.0)
- Maturity 47 → 47 (+0.0)
- Readiness 41 → 49 (+8.2)
- Security 59 → 69 (+10.1)
- Accessibility 35 → 35 (+0.0)
- Performance 100 (new)

## Resolved (4)

- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- No tests found
- Off-boarding risk: anonymized user #1

## New (17)

- Documentation: no project overview (README.md)
- Low cohesion: Pasta (LCOM4 5) (src/pasta.rs)
- Medium vulnerability: RUSTSEC-2026-0285 (Cargo.lock)
- Off-boarding risk: anonymized user #1
- Outdated: actix-web
- Outdated: actix-web-httpauth
- Outdated: bytes
- Outdated: chrono
- Outdated: futures
- Outdated: html-escape
- Outdated: log
- Outdated: openssl
- Outdated: rust-embed
- Outdated: rustls
- Outdated: serde
- Outdated: serde_json
- aes.AES._prepare (cognitive 22) (templates/assets/aes.js)