# Changelog

## Score

- CAI 54 → 56 (+2.4)
- Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

## Lenses

- Code Health 65 → 65 (+0.0)
- Architecture 97 → 97 (+0.4)
- Maturity 48 → 48 (+0.0)
- Readiness 48 → 55 (+6.2)
- Security 63 → 70 (+7.5)

## Resolved (2)

- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)
- Medium CVE: [GHSA redacted] (yarn.lock)

## New (3)

- High CVE: [GHSA redacted] (yarn.lock)
- Medium CVE: [GHSA redacted] (yarn.lock)
- Outdated (npm): lodash