{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "ai-ronin-systems-makefile-mcp",
  "component": "makefile-mcp",
  "generated_at": "2026-11-05T04:49:05.063Z",
  "tracking_since": "2026-10-15",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1a5f0-4bd9-70ab-b9f7-1237c76cd045",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_found",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"gptMalware:QbZNAkvVltwZlYwhH-DA5lMhv38SYxa01PueSB3XVye0\"]",
        "severity": "high"
      },
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 09:42:31.107523+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Malware scan (unverified → fail)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1a5f0-4bd9-70ab-b9f7-1237c76cd045"
    },
    {
      "id": "chg_01a1a0ea-6800-73a7-8349-1fcb82d5be0a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-03",
      "occurred_at": "2026-11-03 10:17:59.020431+00",
      "observed_since": "2026-11-02",
      "source": "scan",
      "summary": "Malware scan (fail → unverified)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1a0ea-6800-73a7-8349-1fcb82d5be0a"
    },
    {
      "id": "chg_01a190d2-875c-7aea-b421-67d1431ae7d5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_found",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"gptMalware:QbZNAkvVltwZlYwhH-DA5lMhv38SYxa01PueSB3XVye0\"]",
        "severity": "high"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 07:17:58.673964+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Malware scan (unverified → fail)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a190d2-875c-7aea-b421-67d1431ae7d5"
    },
    {
      "id": "chg_01a18c4f-a5c5-7a4a-86f8-f0224971ddd1",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 10:16:32.423526+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Malware scan (fail → unverified)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a18c4f-a5c5-7a4a-86f8-f0224971ddd1"
    },
    {
      "id": "chg_01a17711-08fe-771f-913a-4f5313548c04",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 07:16:07.518663+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a17711-08fe-771f-913a-4f5313548c04"
    },
    {
      "id": "chg_01a17711-08ff-79b0-a36d-6241a11a0d4a",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 07:16:07.518663+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a17711-08ff-79b0-a36d-6241a11a0d4a"
    },
    {
      "id": "chg_01a1735d-ad42-7079-a78b-bdf86ee07802",
      "kind": "check.verdict",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_found",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"gptMalware:QbZNAkvVltwZlYwhH-DA5lMhv38SYxa01PueSB3XVye0\"]",
        "severity": "high"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Malware scan (pass → fail)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad42-7079-a78b-bdf86ee07802"
    },
    {
      "id": "chg_01a1735d-ad43-7164-8048-8d0f48b31726",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad43-7164-8048-8d0f48b31726"
    },
    {
      "id": "chg_01a1735d-ad43-75f4-9c01-4ade919cec2e",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59951",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59951"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-59951 no longer affects this package",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad43-75f4-9c01-4ade919cec2e"
    },
    {
      "id": "chg_01a1735d-ad43-7c0d-beec-7356c5466e64",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "37",
        "assessed": "38",
        "resolved": "37",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad43-7c0d-beec-7356c5466e64"
    },
    {
      "id": "chg_01a1735d-ad44-70bd-8843-cdad557d8100",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad44-70bd-8843-cdad557d8100"
    },
    {
      "id": "chg_01a1735d-ad44-7460-9eee-5b2a0733b154",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 14:01:21.449862+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a1735d-ad44-7460-9eee-5b2a0733b154"
    },
    {
      "id": "chg_01a16cbd-cdab-7c86-8ee0-6af1716ccc11",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 07:09:00.637344+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a16cbd-cdab-7c86-8ee0-6af1716ccc11"
    },
    {
      "id": "chg_01a143bc-2374-7763-8ce0-bf107a4c8218",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59951",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59951",
        "severity": "high"
      },
      "occurred_on": "2026-10-16",
      "occurred_at": "2026-10-16 08:02:42.254768+00",
      "observed_since": "2026-10-15",
      "source": "scan",
      "summary": "CVE-2026-59951 affects this package (high)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a143bc-2374-7763-8ce0-bf107a4c8218"
    },
    {
      "id": "chg_01a143bc-2375-7bea-869c-2df7a6c0615c",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "mcp",
        "refs": "[\"CVE-2026-59951\"]",
        "seen": "37",
        "direct": "1",
        "package": "mcp",
        "version": "2.1.1",
        "assessed": "38",
        "resolved": "37",
        "severity": "high",
        "vulnerable": "[{\"name\":\"mcp\",\"version\":\"2.1.1\",\"depth\":1,\"path\":[\"mcp\"],\"refs\":[\"CVE-2026-59951\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-16",
      "occurred_at": "2026-10-16 08:02:42.254768+00",
      "observed_since": "2026-10-15",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/ai-ronin-systems-makefile-mcp/makefile-mcp#chg-chg_01a143bc-2375-7bea-869c-2df7a6c0615c"
    }
  ],
  "days": [
    {
      "date": "2026-11-04",
      "total": 37,
      "delta": 2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-03",
      "total": 35,
      "delta": -2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 37,
      "delta": 2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-30",
      "total": 35,
      "delta": -2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 37,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-25",
      "total": 37,
      "delta": -8,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 10
    },
    {
      "date": "2026-10-24",
      "total": 45,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-16",
      "total": 30,
      "delta": -5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}