<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.bikemeardsley/where-my-hug · where-my-hug · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] where-my-hug: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d2-77ff-a895-bdb70bc3b821</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d2-77ff-a895-bdb70bc3b821</guid><description>Malware scan (unverified → pass). Compared against 2026-10-27.</description><pubDate>Wed, 28 Oct 2026 03:19:32 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] where-my-hug: Known CVEs (unverified → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d3-7c8b-8c8d-13e23ab373af</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d3-7c8b-8c8d-13e23ab373af</guid><description>Known CVEs (unverified → pass). Compared against 2026-10-27.</description><pubDate>Wed, 28 Oct 2026 03:19:32 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] where-my-hug: CVE-2023-54404 no longer affects this package</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d4-7389-98f8-22776569cd77</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a18085-27d4-7389-98f8-22776569cd77</guid><description>CVE-2023-54404 no longer affects this package. Compared against 2026-10-27.</description><pubDate>Wed, 28 Oct 2026 03:19:32 GMT</pubDate><category>security</category><category>improvement</category><category>advisory.resolved</category></item><item><title>[SECURITY] where-my-hug: Known CVEs (fail → unverified)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a17bad-9f64-7b31-888d-b7209453ad35</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a17bad-9f64-7b31-888d-b7209453ad35</guid><description>Known CVEs (fail → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 04:45:38 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] where-my-hug: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a17bad-9f66-786c-a5f2-4a60074dfbdb</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a17bad-9f66-786c-a5f2-4a60074dfbdb</guid><description>Malware scan (pass → unverified). Compared against 2026-10-26.</description><pubDate>Tue, 27 Oct 2026 04:45:38 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] where-my-hug: CVE-2023-54404 affects this package (high)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c4f-7c4a-9be0-185c24fc612a</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c4f-7c4a-9be0-185c24fc612a</guid><description>CVE-2023-54404 affects this package (high). Compared against 2026-10-22.</description><pubDate>Fri, 23 Oct 2026 21:00:16 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] where-my-hug: Known CVEs (pass → fail)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c51-7b51-95c3-813d2fd73e68</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c51-7b51-95c3-813d2fd73e68</guid><description>Known CVEs (pass → fail). Compared against 2026-10-22.</description><pubDate>Fri, 23 Oct 2026 21:00:16 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] where-my-hug: Provenance (fail → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c52-72a8-82e0-5ea389f535e1</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c52-72a8-82e0-5ea389f535e1</guid><description>Provenance (fail → pass). Compared against 2026-10-22.</description><pubDate>Fri, 23 Oct 2026 21:00:16 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] where-my-hug: The attested source repository moved (bikemeardsley/where-my-hug)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c53-7d42-a084-04438141164f</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a16a90-7c53-7d42-a084-04438141164f</guid><description>The attested source repository moved (bikemeardsley/where-my-hug). Compared against 2026-10-22.</description><pubDate>Fri, 23 Oct 2026 21:00:16 GMT</pubDate><category>security</category><category>neutral</category><category>provenance.repo_changed</category></item><item><title>[SECURITY] where-my-hug: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13f46-e537-7558-ae40-2d7dfa3f4573</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13f46-e537-7558-ae40-2d7dfa3f4573</guid><description>Injection markers (unverified → pass). Compared against 2026-10-14.</description><pubDate>Thu, 15 Oct 2026 11:16:13 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] where-my-hug: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13f46-e539-7128-8bf5-fab98fc4ef9d</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13f46-e539-7128-8bf5-fab98fc4ef9d</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-14.</description><pubDate>Thu, 15 Oct 2026 11:16:13 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] where-my-hug: Known CVEs (unverified → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13d89-a08e-78a1-98c7-1ecaad4d1415</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13d89-a08e-78a1-98c7-1ecaad4d1415</guid><description>Known CVEs (unverified → pass). Compared against 2026-10-14.</description><pubDate>Thu, 15 Oct 2026 03:09:50 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] where-my-hug: Known CVEs (pass → unverified)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13bc9-823b-7cb4-a701-388069e4d431</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13bc9-823b-7cb4-a701-388069e4d431</guid><description>Known CVEs (pass → unverified). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 19:00:23 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] where-my-hug: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c1-761d-acfd-baf9eb5a4cf6</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c1-761d-acfd-baf9eb5a4cf6</guid><description>Injection markers (unverified → pass). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 16:05:55 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] where-my-hug: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c2-78d0-86f2-35eb72b5c8ee</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c2-78d0-86f2-35eb72b5c8ee</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 16:05:55 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] where-my-hug: Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)</title><link>https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c3-7515-b9f3-6f8021fca1e1</link><guid isPermaLink="true">https://verifymcp.io/servers/bikemeardsley-where-my-hug/where-my-hug#chg-chg_01a13b29-c3c3-7515-b9f3-6f8021fca1e1</guid><description>Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).). Compared against 2026-10-13.</description><pubDate>Wed, 14 Oct 2026 16:05:55 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item></channel></rss>