{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "basic-bit-vrchat-mcp",
  "component": "basicbit-vrchat-mcp",
  "generated_at": "2026-09-20T21:26:50.363Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 22,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a09369-1549-7cf8-8637-a22d95bc2537",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:18:52.409705+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a09369-1549-7cf8-8637-a22d95bc2537"
    },
    {
      "id": "chg_01a09369-154f-7580-98c4-cf55e49a66c7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:18:52.409705+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a09369-154f-7580-98c4-cf55e49a66c7"
    },
    {
      "id": "chg_01a09369-1551-762f-866b-6e3dd9322a93",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:18:52.409705+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a09369-1551-762f-866b-6e3dd9322a93"
    },
    {
      "id": "chg_01a09169-ba06-7d72-94a1-bdc014f47860",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 17:00:19.969717+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a09169-ba06-7d72-94a1-bdc014f47860"
    },
    {
      "id": "chg_01a09169-ba0a-768c-a7e2-90f963a36d9c",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 17:00:19.969717+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a09169-ba0a-768c-a7e2-90f963a36d9c"
    },
    {
      "id": "chg_01a080e6-6eff-77a5-b8d6-39dbb4934bd2",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 12:02:59.957693+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a080e6-6eff-77a5-b8d6-39dbb4934bd2"
    },
    {
      "id": "chg_01a0601d-6f52-7e6d-bef5-01c4b0db9c49",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 03:15:36.828472+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a0601d-6f52-7e6d-bef5-01c4b0db9c49"
    },
    {
      "id": "chg_01a0601d-6f54-70b2-88b7-1926e9cea48b",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 03:15:36.828472+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a0601d-6f54-70b2-88b7-1926e9cea48b"
    },
    {
      "id": "chg_01a0601d-6f54-75b1-ab10-b8c305dc552b",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 03:15:36.828472+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a0601d-6f54-75b1-ab10-b8c305dc552b"
    },
    {
      "id": "chg_01a05ec5-dde9-761a-b58e-cf4965b8c059",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 21:00:20.544152+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a05ec5-dde9-761a-b58e-cf4965b8c059"
    },
    {
      "id": "chg_01a05ca1-8a01-7274-a4f3-2a9abfd444f3",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 11:01:25.584528+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a05ca1-8a01-7274-a4f3-2a9abfd444f3"
    },
    {
      "id": "chg_01a05ca1-8a02-7720-a7e0-2bb1c9b361b7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 11:01:25.584528+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_01a05ca1-8a02-7720-a7e0-2bb1c9b361b7"
    },
    {
      "id": "chg_019fd9fe-2419-7825-b65c-0f7e4d6aed22",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.none",
      "from_value": "partial",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "136",
        "assessed": "137",
        "resolved": "136",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 02:12:19.036195+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Known CVEs (partial → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fd9fe-2419-7825-b65c-0f7e4d6aed22"
    },
    {
      "id": "chg_019fca8b-4010-775c-87a1-5965dc560691",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 02:12:31.34322+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fca8b-4010-775c-87a1-5965dc560691"
    },
    {
      "id": "chg_019fc6ec-a10b-7452-852d-54b91c6981d0",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:20:24.265816+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc6ec-a10b-7452-852d-54b91c6981d0"
    },
    {
      "id": "chg_019fc44e-9e75-7646-a774-51662945c96e",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:34.534299+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc44e-9e75-7646-a774-51662945c96e"
    },
    {
      "id": "chg_019fc44e-9e76-79d0-90da-351858c0a844",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "BASIC-BIT/vrchat-mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:34.534299+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc44e-9e76-79d0-90da-351858c0a844"
    },
    {
      "id": "chg_019fc44e-9e76-7f1c-be61-25e2d5c4c283",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.tree_partial",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "136",
        "assessed": "136",
        "resolved": "135",
        "unresolved": "1",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:34.534299+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc44e-9e76-7f1c-be61-25e2d5c4c283"
    },
    {
      "id": "chg_019fc44e-9e77-74cf-9b0f-51ff261c9775",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "BASIC-BIT/vrchat-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "BASIC-BIT/vrchat-mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:34.534299+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (BASIC-BIT/vrchat-mcp)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc44e-9e77-74cf-9b0f-51ff261c9775"
    },
    {
      "id": "chg_019fc44e-9e77-79be-ad83-ac57399e32d9",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:34.534299+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fc44e-9e77-79be-ad83-ac57399e32d9"
    },
    {
      "id": "chg_019fbcc0-4c12-7c91-8095-3a5f24e03f83",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 09:55:46.822866+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fbcc0-4c12-7c91-8095-3a5f24e03f83"
    },
    {
      "id": "chg_019fbcc0-4c13-724b-9cb5-a9a8fd022c29",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 09:55:46.822866+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/basic-bit-vrchat-mcp/basicbit-vrchat-mcp#chg-chg_019fbcc0-4c13-724b-9cb5-a9a8fd022c29"
    }
  ],
  "days": [
    {
      "date": "2026-09-12",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-11",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-08",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-04",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-03",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-02",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-01",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-08-31",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}