{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "churichard-fluxmail",
  "component": "fluxmail",
  "generated_at": "2026-09-21T00:34:16.267Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 22,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0acb8-730a-7d90-958b-3c9c1e571a75",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 00:16:04.307972+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0acb8-730a-7d90-958b-3c9c1e571a75"
    },
    {
      "id": "chg_01a0acb8-730c-7ada-a036-45b680328cb2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 00:16:04.307972+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0acb8-730c-7ada-a036-45b680328cb2"
    },
    {
      "id": "chg_01a0abce-a434-75dc-b1ca-79ca923671dc",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 20:00:41.329658+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0abce-a434-75dc-b1ca-79ca923671dc"
    },
    {
      "id": "chg_01a0abce-a437-7b19-ba06-2cf1bba37b3e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 20:00:41.329658+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0abce-a437-7b19-ba06-2cf1bba37b3e"
    },
    {
      "id": "chg_01a0a272-9eff-776b-9231-0d463967be25",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:23:35.866971+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a272-9eff-776b-9231-0d463967be25"
    },
    {
      "id": "chg_01a0a272-9f00-7ad5-8670-0a5bc81b93e4",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:23:35.866971+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a272-9f00-7ad5-8670-0a5bc81b93e4"
    },
    {
      "id": "chg_01a0a272-9f01-70ee-b89c-fab456a39f63",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:23:35.866971+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a272-9f01-70ee-b89c-fab456a39f63"
    },
    {
      "id": "chg_01a0a14b-85a3-71be-b656-e0e665a494b2",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 19:01:16.054906+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a14b-85a3-71be-b656-e0e665a494b2"
    },
    {
      "id": "chg_01a0a14b-85a4-7ace-9b85-9b1ca946e458",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 19:01:16.054906+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a14b-85a4-7ace-9b85-9b1ca946e458"
    },
    {
      "id": "chg_01a0a14b-85a5-7130-98c4-bf5f146eb295",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 19:01:16.054906+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a0a14b-85a5-7130-98c4-bf5f146eb295"
    },
    {
      "id": "chg_01a05f7a-a7d8-775d-ac5c-0d178c8395bb",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 00:17:48.977044+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a05f7a-a7d8-775d-ac5c-0d178c8395bb"
    },
    {
      "id": "chg_01a05f7a-a7d9-7c7d-ad5b-1de9b5e333a9",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 00:17:48.977044+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a05f7a-a7d9-7c7d-ad5b-1de9b5e333a9"
    },
    {
      "id": "chg_01a05e58-7d50-763f-a72a-897823e44128",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 19:00:52.648269+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a05e58-7d50-763f-a72a-897823e44128"
    },
    {
      "id": "chg_01a05e58-7d51-79bd-977f-c65a985c21cf",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 19:00:52.648269+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_01a05e58-7d51-79bd-977f-c65a985c21cf"
    },
    {
      "id": "chg_019ff879-1908-771b-86e6-012605c5479f",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "289",
        "assessed": "288",
        "resolved": "287",
        "unresolved": "2",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 00:15:13.645638+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019ff879-1908-771b-86e6-012605c5479f"
    },
    {
      "id": "chg_019ff879-190b-7a96-a240-973118500fbc",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.tree_partial",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 00:15:13.645638+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 no longer affects this package",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019ff879-190b-7a96-a240-973118500fbc"
    },
    {
      "id": "chg_019fc453-88cb-789c-a028-d5ad9eba58b4",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:13:56.668554+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 affects this package (medium)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc453-88cb-789c-a028-d5ad9eba58b4"
    },
    {
      "id": "chg_019fc453-88cc-77c7-8c54-071ab2245d9f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@hono/node-server",
        "refs": "[\"GHSA-frvp-7c67-39w9\"]",
        "seen": "280",
        "direct": "1",
        "package": "@hono/node-server",
        "version": "1.19.17",
        "assessed": "251",
        "resolved": "250",
        "severity": "medium",
        "unresolved": "30",
        "vulnerable": "[{\"name\":\"@hono/node-server\",\"version\":\"1.19.17\",\"depth\":1,\"path\":[\"@hono/node-server\"],\"refs\":[\"GHSA-frvp-7c67-39w9\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:13:56.668554+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc453-88cc-77c7-8c54-071ab2245d9f"
    },
    {
      "id": "chg_019fc453-88cd-75ce-bfc0-6469ff98a0b7",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:13:56.668554+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc453-88cd-75ce-bfc0-6469ff98a0b7"
    },
    {
      "id": "chg_019fc453-88cd-7a70-b12c-10a1d0115255",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "churichard/fluxmail"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:13:56.668554+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc453-88cd-7a70-b12c-10a1d0115255"
    },
    {
      "id": "chg_019fc453-88ce-7053-92c2-235df50f896f",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "churichard/fluxmail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "churichard/fluxmail",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:13:56.668554+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (churichard/fluxmail)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc453-88ce-7053-92c2-235df50f896f"
    },
    {
      "id": "chg_019fc158-d7cf-700a-868a-d4656601f9ac",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 07:20:52.897553+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/churichard-fluxmail/fluxmail#chg-chg_019fc158-d7cf-700a-868a-d4656601f9ac"
    }
  ],
  "days": [
    {
      "date": "2026-09-21",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-16",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-15",
      "total": 46,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-14",
      "total": 31,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-02",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-01",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-08-26",
      "total": 46,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}