# Changelog

> **This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.**

## Score

- CAI 28 → 50 (+21.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 96 (new)
- Architecture 100 (new)
- Maturity 13 → 57 (+43.5)
- Readiness 15 → 68 (+52.6)
- Security 100 → 28 (-72.4)
- Domain Modelling 89 (new)

## Resolved (6)

- Dependency hygiene not measured — no supported dependency manifest was read
- No automated tests
- No tests found
- bus factor not measured — no commits were sampled
- early-stage repository — too little history to judge knowledge freshness
- single-commit history — no usable git history window to measure hotspots

## New (38)

- ConsumerListener.run (cognitive 16) (mq/src/main/java/io/github/wangyuheng/arc/mq/consumer/ConsumerCluster.java)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- DgraphParser.unionClassHandle (cognitive 27) (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/repository/parser/DgraphParser.java)
- DgraphSqlHelper.flatClass (cognitive 21) (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/util/DgraphSqlHelper.java)
- Dormant codebase
- Duplicated block (5 lines × 2) (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/repository/SimpleDgraphRepository.java)
- Duplicated block (8 lines × 2) (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/repository/SimpleDgraphRepository.java)
- GraphqlClientsRegistrar.getBasePackages (cognitive 20) (graphql-client/src/main/java/io/github/wangyuheng/arc/graphqlclient/GraphqlClientsRegistrar.java)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- High: security finding (details withheld)
- JSONFieldDeserializerUtil.getJsonMap (cognitive 41) (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/util/JSONFieldDeserializerUtil.java)
- LLM evaluation failed
- Largest orphaned file (dgraph/src/main/java/io/github/wangyuheng/arc/dgraph/repository/SimpleDgraphRepository.java)
- Medium: security finding (details withheld)
- No SBOM
- …and 18 more

## Architecture

- Containers 0 added · 0 removed · contexts 1 added · 0 removed · edges 0 added · 0 removed

## Added bounded contexts (1)

- arc