{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "brntech-myotp",
  "component": "myotp-mcp",
  "generated_at": "2026-11-06T15:53:34.673Z",
  "tracking_since": "2026-09-03",
  "counts": {
    "critical": 0,
    "security": 21,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1a51b-413a-713c-a614-2485a07c9dce",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 05:49:49.217317+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a1a51b-413a-713c-a614-2485a07c9dce"
    },
    {
      "id": "chg_01a1810e-0fa9-7d28-9c30-b64369c99386",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 05:49:04.740182+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a1810e-0fa9-7d28-9c30-b64369c99386"
    },
    {
      "id": "chg_01a16c72-ed9f-7938-84d6-3e26651fc6bc",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:47:13.650158+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a16c72-ed9f-7938-84d6-3e26651fc6bc"
    },
    {
      "id": "chg_01a16c72-eda1-7802-b6f1-42aa47fea83f",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "zod",
        "refs": "[\"CVE-2023-54404\"]",
        "seen": "120",
        "direct": "1",
        "package": "zod",
        "version": "3.25.76",
        "assessed": "121",
        "resolved": "120",
        "severity": "high",
        "vulnerable": "[{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:47:13.650158+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a16c72-eda1-7802-b6f1-42aa47fea83f"
    },
    {
      "id": "chg_01a152ac-4872-70f7-b91f-7e0764a4fbea",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-19",
      "occurred_at": "2026-10-19 05:39:44.830936+00",
      "observed_since": "2026-10-18",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a152ac-4872-70f7-b91f-7e0764a4fbea"
    },
    {
      "id": "chg_01a13bfc-b0eb-7b48-8e9a-eed0900d8efa",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 19:56:18.437196+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a13bfc-b0eb-7b48-8e9a-eed0900d8efa"
    },
    {
      "id": "chg_01a135ff-09a6-7f35-9dca-47eda8cb256a",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.77",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 16:01:08.333861+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Stability (0.77 → unverified)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a135ff-09a6-7f35-9dca-47eda8cb256a"
    },
    {
      "id": "chg_01a135ff-09a7-7b24-99f4-31f868e967d3",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 16:01:08.333861+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a135ff-09a7-7b24-99f4-31f868e967d3"
    },
    {
      "id": "chg_01a12d35-3fb1-787f-8742-7a495b1cafe9",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.87",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-11",
      "occurred_at": "2026-10-11 23:03:46.811446+00",
      "observed_since": "2026-10-07",
      "source": "scan",
      "summary": "Stability (0.87 → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a12d35-3fb1-787f-8742-7a495b1cafe9"
    },
    {
      "id": "chg_01a1002c-6a51-798f-9d2a-31e7248e4480",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-03",
      "occurred_at": "2026-10-03 05:11:13.0727+00",
      "observed_since": "2026-10-02",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a1002c-6a51-798f-9d2a-31e7248e4480"
    },
    {
      "id": "chg_01a0c58d-ff0a-76cd-b568-5b12a130375c",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.57",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 20:00:12.071+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Stability (0.57 → unverified)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a0c58d-ff0a-76cd-b568-5b12a130375c"
    },
    {
      "id": "chg_01a0c58d-ff08-7890-b0cc-f0d66cb20d9c",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 20:00:12.071+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a0c58d-ff08-7890-b0cc-f0d66cb20d9c"
    },
    {
      "id": "chg_01a0a89f-4298-7074-bd8c-5397a1a1f9bf",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-82562",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-82562"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 05:10:04.572528+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "CVE-2026-82562 no longer affects this package",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a0a89f-4298-7074-bd8c-5397a1a1f9bf"
    },
    {
      "id": "chg_01a0a89f-429b-75fe-a4b9-c57ce2475f42",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "123",
        "assessed": "124",
        "resolved": "123",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 05:10:04.572528+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a0a89f-429b-75fe-a4b9-c57ce2475f42"
    },
    {
      "id": "chg_01a0a89f-429b-7d47-bf8b-21defcb80c37",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-82417",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-82417"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 05:10:04.572528+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "CVE-2026-82417 no longer affects this package",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a0a89f-429b-7d47-bf8b-21defcb80c37"
    },
    {
      "id": "chg_01a06e6f-afba-764b-b345-cf047deecea8",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 22:00:08.157486+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06e6f-afba-764b-b345-cf047deecea8"
    },
    {
      "id": "chg_01a06e6f-afb6-785c-ad26-e7de1993b51a",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 22:00:08.157486+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06e6f-afb6-785c-ad26-e7de1993b51a"
    },
    {
      "id": "chg_01a06aca-237c-7c9f-b096-526300b7174f",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-82562",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-82562",
        "severity": "medium"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 05:00:27.303911+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "CVE-2026-82562 affects this package (medium)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06aca-237c-7c9f-b096-526300b7174f"
    },
    {
      "id": "chg_01a06aca-237d-7197-ad44-2cc719056da2",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "express > qs",
        "refs": "[\"CVE-2026-82417\",\"CVE-2026-82562\"]",
        "seen": "124",
        "package": "qs",
        "version": "6.15.3",
        "assessed": "125",
        "resolved": "124",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"qs\",\"version\":\"6.15.3\",\"depth\":2,\"path\":[\"express\",\"qs\"],\"refs\":[\"CVE-2026-82417\",\"CVE-2026-82562\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 05:00:27.303911+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06aca-237d-7197-ad44-2cc719056da2"
    },
    {
      "id": "chg_01a06aca-237d-76b6-90cd-6d6cb25a52c3",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 05:00:27.303911+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06aca-237d-76b6-90cd-6d6cb25a52c3"
    },
    {
      "id": "chg_01a06aca-237c-722b-a594-84abb4bf653c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-82417",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-82417",
        "severity": "medium"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 05:00:27.303911+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "CVE-2026-82417 affects this package (medium)",
      "link": "https://verifymcp.io/servers/brntech-myotp/myotp-mcp#chg-chg_01a06aca-237c-722b-a594-84abb4bf653c"
    }
  ],
  "days": [
    {
      "date": "2026-11-06",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-03",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-28",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-27",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-24",
      "total": 88,
      "delta": -5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-19",
      "total": 93,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-18",
      "total": 93,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}