# Changelog

## Score

- CAI 50 → 54 (+3.9)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 56 → 61 (+4.3)
- Architecture 100 (new)
- Maturity 45 → 45 (+0.0)
- Readiness 51 → 54 (+2.5)
- Security 69 → 75 (+6.2)

## Resolved (3)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Floating npm dependency: jquery
- High CVE: [GHSA redacted] (yarn.lock)

## New (5)

- Dependency hygiene PARTLY measured — Composer dependencies read, no committed lock to grade for currency
- Documentation: no architecture or design documentation (docs/README.md)
- Documentation: no usage examples (docs/methods.rst)
- FileTooLong: js/bootstrap-datepicker.js (js/bootstrap-datepicker.js)
- High CVE: [CVE redacted] (yarn.lock)