# Changelog

## Score

- CAI 50 → 50 (+0.4)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 98 → 98 (+0.0)
- Architecture 69 → 69 (+0.0)
- Maturity 59 → 59 (+0.0)
- Readiness 28 → 29 (+0.9)
- Security 75 → 75 (+0.0)
- Domain Modelling 100 → 100 (+0.0)

## Resolved (1)

- Medium CVE: [GHSA redacted] (package-lock.json)

## New (8)

- Critical CVE: [GHSA redacted] (package-lock.json)
- Critical CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- The Usage example shows AppModule but no code for an event handler class, leaving its presence unverifiable from this single doc. (README.md)