{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "chapibunny-repolens",
  "component": "chappibunny-repolens",
  "generated_at": "2026-11-05T11:52:13.682Z",
  "tracking_since": "2026-10-19",
  "counts": {
    "critical": 0,
    "security": 17,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a18f47-3ea0-766d-96d5-609da4cb8097",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-118764",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-118764",
        "severity": "medium"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 00:06:13.343481+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "CVE-2026-118764 affects this package (medium)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a18f47-3ea0-766d-96d5-609da4cb8097"
    },
    {
      "id": "chg_01a18f47-3ea3-7f00-8b6e-2690f7e42d71",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-118773",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-118773",
        "severity": "medium"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 00:06:13.343481+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "CVE-2026-118773 affects this package (medium)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a18f47-3ea3-7f00-8b6e-2690f7e42d71"
    },
    {
      "id": "chg_01a18f47-3ea4-7563-b1e2-bb609bde6591",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.transitive",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@sentry/node > @sentry/bundler-plugins > glob",
        "refs": "[\"CVE-2026-118773\",\"CVE-2026-118764\"]",
        "seen": "155",
        "package": "glob",
        "version": "13.0.6",
        "assessed": "156",
        "resolved": "155",
        "severity": "medium",
        "transitive": "2",
        "vulnerable": "[{\"name\":\"glob\",\"version\":\"13.0.6\",\"depth\":3,\"path\":[\"@sentry/node\",\"@sentry/bundler-plugins\",\"glob\"],\"refs\":[\"CVE-2026-118773\"]},{\"name\":\"minimatch\",\"version\":\"10.2.6\",\"depth\":4,\"path\":[\"@sentry/node\",\"@sentry/bundler-plugins\",\"glob\",\"minimatch\"],\"refs\":[\"CVE-2026-118764\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 00:06:13.343481+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a18f47-3ea4-7563-b1e2-bb609bde6591"
    },
    {
      "id": "chg_01a17595-4822-771d-b281-6a596c60e818",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 00:21:20.011833+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17595-4822-771d-b281-6a596c60e818"
    },
    {
      "id": "chg_01a17595-4823-732f-9d41-36be778b1938",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 00:21:20.011833+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17595-4823-732f-9d41-36be778b1938"
    },
    {
      "id": "chg_01a17262-9268-771a-bf4b-24536aec412c",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 09:27:05.033951+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2023-54404 no longer affects this package",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17262-9268-771a-bf4b-24536aec412c"
    },
    {
      "id": "chg_01a17262-9269-7b7d-a3d0-51da2110c8f5",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "133",
        "assessed": "134",
        "resolved": "133",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 09:27:05.033951+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17262-9269-7b7d-a3d0-51da2110c8f5"
    },
    {
      "id": "chg_01a17262-926a-75b1-a346-e4bb26497eae",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 09:27:05.033951+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17262-926a-75b1-a346-e4bb26497eae"
    },
    {
      "id": "chg_01a17262-926a-7d3a-849e-11ad21a062f7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 09:27:05.033951+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a17262-926a-7d3a-849e-11ad21a062f7"
    },
    {
      "id": "chg_01a16b3d-d0c8-79e3-a7c4-6a40e800a6a1",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.no_fix_available",
      "to_code": "cve.direct",
      "from_value": "partial",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "zod",
        "refs": "[\"CVE-2023-54404\"]",
        "seen": "134",
        "direct": "1",
        "package": "zod",
        "version": "3.25.76",
        "assessed": "135",
        "resolved": "134",
        "severity": "high",
        "vulnerable": "[{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 00:09:35.669977+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (partial → fail)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a16b3d-d0c8-79e3-a7c4-6a40e800a6a1"
    },
    {
      "id": "chg_01a16b3d-d0c9-7e8f-b388-622bff3675ab",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 00:09:35.669977+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a16b3d-d0c9-7e8f-b388-622bff3675ab"
    },
    {
      "id": "chg_01a16b3d-d0ca-746e-8576-ec692d54ce11",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-93687",
      "subject_child": "",
      "from_code": "cve.no_fix_available",
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-93687"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 00:09:35.669977+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-93687 no longer affects this package",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a16b3d-d0ca-746e-8576-ec692d54ce11"
    },
    {
      "id": "chg_01a160fb-c115-720c-82ff-4c628f9ea199",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.no_fix_available",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "refs": "[\"CVE-2026-93687\"]",
        "seen": "134",
        "package": "braces",
        "assessed": "135",
        "resolved": "134",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"braces\",\"version\":\"3.0.3\",\"depth\":3,\"path\":[\"fast-glob\",\"micromatch\",\"braces\"],\"refs\":[\"CVE-2026-93687\"]}]",
        "no_fix_refs": "[\"CVE-2026-93687\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 00:21:14.107978+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a160fb-c115-720c-82ff-4c628f9ea199"
    },
    {
      "id": "chg_01a1600d-24d8-7e89-88ae-1bbfe78f6ecf",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.no_fix_available",
      "to_code": "cve.inconclusive",
      "from_value": "partial",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 20:00:36.540091+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (partial → unverified)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a1600d-24d8-7e89-88ae-1bbfe78f6ecf"
    },
    {
      "id": "chg_01a15efa-d668-7a4f-abf3-69138ef6cabb",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "CHAPIBUNNY/repolens"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 15:00:59.597943+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a15efa-d668-7a4f-abf3-69138ef6cabb"
    },
    {
      "id": "chg_01a15efa-d669-7701-963c-602fef95b36b",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "CHAPIBUNNY/repolens",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "CHAPIBUNNY/repolens",
        "from": ""
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 15:00:59.597943+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "The attested source repository moved (CHAPIBUNNY/repolens)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a15efa-d669-7701-963c-602fef95b36b"
    },
    {
      "id": "chg_01a1569f-8474-7ccc-bcbf-dbdab36783ce",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-20",
      "occurred_at": "2026-10-20 00:04:17.076045+00",
      "observed_since": "2026-10-19",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/chapibunny-repolens/chappibunny-repolens#chg-chg_01a1569f-8474-7ccc-bcbf-dbdab36783ce"
    }
  ],
  "days": [
    {
      "date": "2026-11-03",
      "total": 48,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 48,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-27",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-10-25",
      "total": 49,
      "delta": 5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-10-24",
      "total": 44,
      "delta": -5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-22",
      "total": 49,
      "delta": 10,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-21",
      "total": 39,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    }
  ]
}