# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 49 → 52 (+2.5)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 52 → 52 (+0.1)
- Architecture 89 → 90 (+1.7)
- Maturity 39 → 44 (+5.4)
- Readiness 55 → 55 (+0.0)
- Security 60 → 58 (-1.3)
- Performance 100 → 100 (+0.0)

## Resolved (7)

- Workflow token permissions not restricted
- matcherFromGroupMatchers::superMatcher (cyclomatic 36) (module/core/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)
- matcherFromGroupMatchers::superMatcher (cyclomatic 36) (module/web/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)
- sizzle.matcherFromGroupMatchers (cognitive 59) (module/core/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)
- sizzle.matcherFromGroupMatchers (cognitive 59) (module/web/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)
- sizzle.matcherFromGroupMatchers (cyclomatic 37) (module/core/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)
- sizzle.matcherFromGroupMatchers (cyclomatic 37) (module/web/src/main/resources/com/tribbloids/spookystuff/lib/js/sizzle.js)

## New (103)

- Medium: security finding (details withheld)
- Medium: security finding (details withheld)
- Orphaned file (module/benchmark/src/main/java/org/apache/spark/benchmark/__inline/Benchmark.scala)
- Orphaned file (module/build.gradle.kts)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/AwaitWithHeartbeat.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/CommonUtils.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/TreeException.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/classpath/ClasspathResolver.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/data/EAVLike.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/data/EAVSchema.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/lifespan/Cleanable.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/refl/CatalystTypeOps.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/refl/ReflectionUtils.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/refl/TypeMagnet.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/commons/refl/TypeUtils.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/io/CrossPlatformFileUtils.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/io/HDFSResolver.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/io/LocalResolver.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/io/Resource.scala)
- Orphaned file (module/commons/src/main/scala/com/tribbloids/spookystuff/io/TempFile.scala)
- …and 83 more

## Architecture

- 0 containers · 1 bounded contexts · 0 dependency edges (baseline)