# Weekly Health Digest — 2026-05-25

**Coverage:** This week vs 2026-05-13.

Quiet week: zero commits landed in the trailing 7 days (last week: 12). With no shipped changes, delta-based regression and improvement tracking is skipped. The sections below report current-state values that hold independent of weekly activity.

## Current state concerns

- CI pass rate below 80% over 30 days (current 0.0%, last-10 runs: empty — no recorded runs)
- JS dependency vulnerabilities greater than 0 (current 3, up from 2 last week)
- Files over 300 lines exceed baseline + 10% (current 127 vs baseline 109; 10% threshold is 120)
- `sdk/legacy/dashclaw-v1.js` over 2000 lines (2934 lines)
- `app/docs/page.js` over 2000 lines (2305 lines)

## One thing to do this week

Run `npm audit` and resolve the 3 JS vulnerabilities (one new since last week). This is bounded, well under 4 hours, and the lockfile is fresh (age 0 days), so any fix lands cleanly without a noisy diff.
