io.github.CallMarcus/securityscorecard-mcp · callmarcus-securityscorecard-mcp · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] callmarcus-securityscorecard-mcp: CVE-2026-69207 no longer affects this packagehttps://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fcf4c-39ce-7487-bb3a-a3fb73065f73https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fcf4c-39ce-7487-bb3a-a3fb73065f73CVE-2026-69207 no longer affects this package. Compared against 2026-08-04.Wed, 05 Aug 2026 00:21:47 GMTsecurityimprovementadvisory.resolved[SECURITY] callmarcus-securityscorecard-mcp: CVE-2026-69207 affects this package (high)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fca23-9338-7e03-ba32-38bf0edc0091https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fca23-9338-7e03-ba32-38bf0edc0091CVE-2026-69207 affects this package (high). Compared against 2026-08-03.Tue, 04 Aug 2026 00:19:16 GMTsecurityregressionadvisory.identified[SECURITY] callmarcus-securityscorecard-mcp: Install scripts (unverified → pass)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-7d5e-be12-7a2f12369ee3https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-7d5e-be12-7a2f12369ee3Install scripts (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityimprovementcheck.reverified[SECURITY] callmarcus-securityscorecard-mcp: Provenance (unverified → pass)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-7223-92a4-ab9a29edba7chttps://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-7223-92a4-ab9a29edba7cProvenance (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityimprovementcheck.reverified[SECURITY] callmarcus-securityscorecard-mcp: Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-75e7-b3cd-40ae15d43177https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-75e7-b3cd-40ae15d43177Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityneutralcheck.reason[SECURITY] callmarcus-securityscorecard-mcp: The attested source repository moved (CallMarcus/security-scorecard-mcp)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-799a-b867-17fb9b182fc0https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291c-799a-b867-17fb9b182fc0The attested source repository moved (CallMarcus/security-scorecard-mcp). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityneutralprovenance.repo_changed[SECURITY] callmarcus-securityscorecard-mcp: GHSA-f88m-g3jw-g9cj affects this package (high)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291a-746a-81d8-888b93a03528https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291a-746a-81d8-888b93a03528GHSA-f88m-g3jw-g9cj affects this package (high). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityregressionadvisory.identified[SECURITY] callmarcus-securityscorecard-mcp: CVE-2026-39244 affects this package (high)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-73b6-9311-878992693480https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-73b6-9311-878992693480CVE-2026-39244 affects this package (high). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityregressionadvisory.identified[SECURITY] callmarcus-securityscorecard-mcp: Known CVEs (unverified → fail)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-78fa-adb4-9765476eabd9https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fc498-291b-78fa-adb4-9765476eabd9Known CVEs (unverified → fail). Compared against 2026-08-01.Sun, 02 Aug 2026 22:28:54 GMTsecurityregressioncheck.reverified[SECURITY] callmarcus-securityscorecard-mcp: Malware scan (pass → unverified)https://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fb71e-92c8-7b2b-80a6-7ef7e05a110fhttps://verifymcp.io/servers/callmarcus-securityscorecard-mcp/callmarcus-securityscorecard-mcp#chg-chg_019fb71e-92c8-7b2b-80a6-7ef7e05a110fMalware scan (pass → unverified). Compared against 2026-07-30.Fri, 31 Jul 2026 07:41:01 GMTsecurityregressioncheck.unverifiable