# Changelog

## Score

- CAI 62 → 61 (-0.9)
- Rubric changed (rubric-2026.10.1 → rubric-2026.10.5) — scores are not directly comparable.

## Lenses

- Code Health 76 → 76 (-0.1)
- Architecture 70 → 74 (+3.1)
- Maturity 64 → 60 (-4.8)
- Readiness 58 → 58 (+0.0)
- Security 62 → 66 (+3.3)
- Accessibility 74 → 66 (-8.3)
- Performance 100 → 100 (+0.0)

## Resolved (3)

- Low CVE: [GHSA redacted] (web/yarn.lock)
- TodoComment (web/src/main/scala/net/wiringbits/components/widgets/SignUpForm.scala)
- Workflow holding a long-lived secret is unscoped

## New (20)

- Critical CVE: [GHSA redacted] (lib/api/js/yarn.lock)
- FileTooLong: pages/HomePage.scala (web/src/main/scala/net/wiringbits/components/pages/HomePage.scala)
- High CVE: [GHSA redacted] (lib/ui/yarn.lock)
- High CVE: [GHSA redacted] (lib/api/js/yarn.lock)
- High CVE: [GHSA redacted] (lib/ui/yarn.lock)
- Medium CVE: [GHSA redacted] (web/yarn.lock)
- MethodTooLong: SignInPage.apply (web/src/main/scala/net/wiringbits/components/pages/SignInPage.scala)
- Off-boarding risk: anonymized user #1
- Orphaned file (lib/api/shared/src/main/scala/net/wiringbits/api/endpoints/AuthEndpoints.scala)
- Orphaned file (lib/api/shared/src/main/scala/net/wiringbits/api/endpoints/UsersEndpoints.scala)
- Orphaned file (server/src/main/scala/controllers/UsersController.scala)
- Orphaned file (server/src/main/scala/net/wiringbits/apis/EmailApiAWSImpl.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/I18nMessages.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/pages/VerifyEmailWithTokenPage.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/widgets/EditPasswordForm.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/widgets/EditUserForm.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/widgets/ForgotPasswordForm.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/widgets/ResendVerifyEmailForm.scala)
- Orphaned file (web/src/main/scala/net/wiringbits/components/widgets/ResetPasswordForm.scala)
- Workflow holding a long-lived secret is unscoped (.github/workflows/codepreview.yml)

## Changes since last survey

- 1 commits — 1 feature/other, 0 fixes

## By area

- web/src — 1 commit

## Notable commits

- change: Apply refreshed UI design to all frontend pages and widgets (#445)