# Changelog

## Score

- CAI 26 → 27 (+1.0)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 32 → 32 (+0.0)
- Architecture 80 → 79 (-0.6)
- Maturity 48 → 48 (+0.0)
- Readiness 12 → 12 (+0.3)
- Security 67 → 67 (+0.0)
- Accessibility 30 → 30 (+0.0)
- Performance 100 (new)

## Resolved (6)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- High CVE: [GHSA redacted] (web/package-lock.json)
- High CVE: [GHSA redacted] (web/package-lock.json)
- Medium CVE: [GHSA redacted] (web/package-lock.json)

## New (24)

- High CVE: [GHSA redacted] (web/package-lock.json)
- Low cohesion: Base (LCOM4 6) (simple-mind-map/src/layouts/Base.js)
- Low cohesion: RichText (LCOM4 7) (simple-mind-map/src/plugins/RichText.js)
- Medium vulnerability: [GHSA redacted] (web/package-lock.json)
- Outdated (npm): @svgdotjs/svg.js
- Outdated (npm): axios
- Outdated (npm): codemirror
- Outdated (npm): core-js
- Outdated (npm): deepmerge
- Outdated (npm): eventemitter3
- Outdated (npm): highlight.js
- Outdated (npm): jszip
- Outdated (npm): katex
- Outdated (npm): mdast-util-from-markdown
- Outdated (npm): simple-mind-map-plugin-themes
- Outdated (npm): uuid
- Outdated (npm): v-viewer
- Outdated (npm): vue
- Outdated (npm): vue-i18n
- Outdated (npm): vue-router
- …and 4 more