calcom/cal.diy

• CAI 30 → 31 (+1.1)
• Rubric changed (rubric-2026.08.17 → rubric-2026.08.18) — scores are not directly comparable.

• Code Health 78 → 83 (+5.7)
• Architecture 19 → 19 (-0.2)
• Maturity 81 → 82 (+1.2)
• Readiness 24 → 24 (-0.1)
• Security 42 → 49 (+7.1)
• Domain Modelling 100 → 100 (+0.0)
• Accessibility 39 → 42 (+2.8)

• Change coupling: CalendarService.ts ↔ googleapis.ts (packages/app-store/googlecalendar/lib/CalendarService.ts)
• Change coupling: add.ts ↔ callback.ts (packages/app-store/googlecalendar/api/add.ts)
• Change coupling: oauth-clients-users.service.ts ↔ timezones.controller.ts (apps/api/v2/src/modules/oauth-clients/services/oauth-clients-users.service.ts)
• Change coupling: onboarding-browser-view.tsx ↔ onboarding-invite-browser-view.tsx (apps/web/modules/onboarding/components/onboarding-browser-view.tsx)
• Change coupling: prisma-exception.filter.ts ↔ trpc-exception.filter.ts (apps/api/v2/src/filters/prisma-exception.filter.ts)
• Change coupling: slots.controller.ts ↔ slots.service.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/controllers/slots.controller.ts)
• Change coupling: trpc-exception.filter.ts ↔ timezones.service.ts (apps/api/v2/src/filters/trpc-exception.filter.ts)
• Dependency hygiene not measured — no supported dependency manifest was read
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• …and 109 more

• Change coupling: RegularBookingService.ts ↔ getMockRequestDataForBooking.ts (packages/features/bookings/lib/service/RegularBookingService.ts)
• Change coupling: gcal.service.ts ↔ outlook.service.ts (apps/api/v2/src/platform/calendars/services/gcal.service.ts)
• Change coupling: slots.controller.ts ↔ slots.repository.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/controllers/slots.controller.ts)
• Change coupling: slots.controller.ts ↔ timezones.service.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/controllers/slots.controller.ts)
• Change coupling: slots.repository.ts ↔ event-types.service.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/slots.repository.ts)
• Change coupling: slots.repository.ts ↔ timezones.controller.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/slots.repository.ts)
• Change coupling: slots.repository.ts ↔ timezones.service.ts (apps/api/v2/src/modules/slots/slots-2024-04-15/slots.repository.ts)
• Critical CVE: [GHSA redacted] (yarn.lock)
• Critical vulnerability: [GHSA redacted] (yarn.lock)
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High CVE: [GHSA redacted] (yarn.lock)
• High vulnerability: [GHSA redacted] (yarn.lock)
• High vulnerability: [GHSA redacted] (yarn.lock)
• …and 66 more

• 1 commits — 0 feature/other, 1 fixes

• packages/i18n — 1 commit

• fix: fix(i18n): add missing space before Hebrew duration abbreviation (#29694) (#29773)

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

calcom/cal.diy was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.