# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 62 → 33 (-29.5)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 93 → 100 (+6.6)
- Architecture 100 → 69 (-31.0)
- Maturity 47 → 44 (-3.2)
- Readiness 64 → 17 (-47.8)
- Security 80 → 34 (-45.6)

## Resolved (27)

- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- Dormant codebase
- FileTooLong: caseclass/CaseClassDeserializer.scala (util-jackson/src/main/scala/com/twitter/util/jackson/caseclass/CaseClassDeserializer.scala)
- FileTooLong: io/Buf.scala (util-core/src/main/scala/com/twitter/io/Buf.scala)
- FileTooLong: testing/ArgumentCapture.scala (util-test/src/main/scala/com/twitter/util/testing/ArgumentCapture.scala)
- FileTooLong: util/Activity.scala (util-core/src/main/scala/com/twitter/util/Activity.scala)
- FileTooLong: util/Futures.scala (util-core/src/main/scala/com/twitter/util/Futures.scala)
- FileTooLong: util/Local.scala (util-core/src/main/scala/com/twitter/util/Local.scala)
- FileTooLong: validation/ScalaValidator.scala (util-validator/src/main/scala/com/twitter/util/validation/ScalaValidator.scala)
- Further sole-owners (lower concentration)
- Largest orphaned file (util-core/src/main/scala/com/twitter/util/Future.scala)
- Largest orphaned file (util-core/src/main/scala/com/twitter/util/Local.scala)
- Largest orphaned file (util-test/src/main/scala/com/twitter/util/testing/ArgumentCapture.scala)
- Off-boarding risk: anonymized user #1
- Scanner failed to run — not a clean result
- TooManyMethods: Activity (util-core/src/main/scala/com/twitter/util/Activity.scala)
- TooManyMethods: BufBenchmark (util-benchmark/src/main/scala/com/twitter/io/BufBenchmark.scala)
- TooManyMethods: ByteReaderImpl (util-core/src/main/scala/com/twitter/io/ByteReader.scala)
- TooManyMethods: Flag (util-app/src/main/scala/com/twitter/app/Flag.scala)
- …and 7 more

## New (20)

- Coverage not measured — test suite did not build
- Dimension evaluation failed
- Duplicated block (5 lines × 2) (util-core/src/main/java/com/twitter/service/VirtualMachineErrorTerminator.java)
- Leaked secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-dsa.key)
- Leaked secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-ec.key)
- Leaked secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-garbage.key)
- Leaked secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8.key)
- Medium: security finding (details withheld)
- No tests found
- Secret: generic-api-key (CHANGELOG.rst)
- Secret: generic-api-key (CHANGES)
- Secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-dsa.key)
- Secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-ec.key)
- Secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8-garbage.key)
- Secret: private-key (util-security-test-certs/src/main/resources/keys/test-pkcs8.key)
- Secret: private-key (util-security/src/main/scala/com/twitter/util/security/Pkcs8EncodedKeySpecFile.scala)
- Secret: private-key (util-security/src/main/scala/com/twitter/util/security/PrivateKeyFile.scala)
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots
- single-maintainer — knowledge-concentration (bus factor) risk

## Architecture

- Containers 0 added · 0 removed · contexts 0 added · 1 removed · edges 0 added · 0 removed

## Removed bounded contexts (1)

- .