{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "com-onadit-onadit",
  "component": "onadit",
  "generated_at": "2026-11-05T09:27:34.776Z",
  "tracking_since": "2026-10-28",
  "counts": {
    "critical": 0,
    "security": 35,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1aa2b-6ce6-78a0-a26a-58f2a1a40bd5",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 05:25:35.058426+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1aa2b-6ce6-78a0-a26a-58f2a1a40bd5"
    },
    {
      "id": "chg_01a1aa2b-6ce9-7829-9854-1e30c409bd43",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 05:25:35.058426+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1aa2b-6ce9-7829-9854-1e30c409bd43"
    },
    {
      "id": "chg_01a1a826-299f-766d-8c42-9fd738d1c80a",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 20:00:34.895164+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1a826-299f-766d-8c42-9fd738d1c80a"
    },
    {
      "id": "chg_01a1a826-29a2-7096-9b97-acc265b37ac6",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 20:00:34.895164+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1a826-29a2-7096-9b97-acc265b37ac6"
    },
    {
      "id": "chg_01a1a0f5-80e5-7d42-b618-b31f64c296df",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_none",
      "to_code": "provenance.repo_verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-03",
      "occurred_at": "2026-11-03 10:30:06.2378+00",
      "observed_since": "2026-11-02",
      "source": "scan",
      "summary": "Source repository (fail → pass)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1a0f5-80e5-7d42-b618-b31f64c296df"
    },
    {
      "id": "chg_01a19ab0-eefa-7e51-b40d-dc1514a4e098",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "adm-zip",
        "refs": "[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-39244\",\"CVE-2026-16633\",\"CVE-2023-54404\"]",
        "seen": "215",
        "direct": "3",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "216",
        "resolved": "215",
        "severity": "high",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":1,\"path\":[\"adm-zip\"],\"refs\":[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-76845\",\"CVE-2026-39244\"]},{\"name\":\"pdfjs-dist\",\"version\":\"5.7.284\",\"depth\":1,\"path\":[\"pdfjs-dist\"],\"refs\":[\"CVE-2026-16633\"]},{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "no_fix_refs": "[\"CVE-2026-76845\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 05:17:29.194682+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a19ab0-eefa-7e51-b40d-dc1514a4e098"
    },
    {
      "id": "chg_01a19ab0-eefc-74c5-87f3-abca28a7c8da",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 05:17:29.194682+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a19ab0-eefc-74c5-87f3-abca28a7c8da"
    },
    {
      "id": "chg_01a19ab0-eefc-7e9d-9dbd-ee9834c1c1cd",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 05:17:29.194682+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a19ab0-eefc-7e9d-9dbd-ee9834c1c1cd"
    },
    {
      "id": "chg_01a196d1-f29c-7bba-9073-593b6c05c99e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-11-01",
      "occurred_at": "2026-11-01 11:15:03.926622+00",
      "observed_since": "2026-10-31",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a196d1-f29c-7bba-9073-593b6c05c99e"
    },
    {
      "id": "chg_01a196d1-f2aa-7052-b370-c6a380e16d0d",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-01",
      "occurred_at": "2026-11-01 11:15:03.926622+00",
      "observed_since": "2026-10-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a196d1-f2aa-7052-b370-c6a380e16d0d"
    },
    {
      "id": "chg_01a196d1-f2af-7c67-b39f-9cc3184c24c8",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-01",
      "occurred_at": "2026-11-01 11:15:03.926622+00",
      "observed_since": "2026-10-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a196d1-f2af-7c67-b39f-9cc3184c24c8"
    },
    {
      "id": "chg_01a18b40-9374-7ea6-9329-cab5cb8fe9e3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-16633",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-16633",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-16633 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9374-7ea6-9329-cab5cb8fe9e3"
    },
    {
      "id": "chg_01a18b40-9376-76ec-bd1a-7d09a15085c7",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-102282",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-102282",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-102282 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9376-76ec-bd1a-7d09a15085c7"
    },
    {
      "id": "chg_01a18b40-9376-7c97-bfdc-0d09b3324e52",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114104",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114104",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-114104 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9376-7c97-bfdc-0d09b3324e52"
    },
    {
      "id": "chg_01a18b40-9377-77c4-a334-fda1ae0b897c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-39244",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-39244",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-39244 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9377-77c4-a334-fda1ae0b897c"
    },
    {
      "id": "chg_01a18b40-9377-7eea-be58-1ce2c4381ef3",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "adm-zip",
        "refs": "[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-39244\",\"CVE-2026-16633\",\"CVE-2023-54404\"]",
        "seen": "215",
        "direct": "3",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "216",
        "resolved": "215",
        "severity": "high",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":1,\"path\":[\"adm-zip\"],\"refs\":[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-76845\",\"CVE-2026-39244\"]},{\"name\":\"pdfjs-dist\",\"version\":\"5.7.284\",\"depth\":1,\"path\":[\"pdfjs-dist\"],\"refs\":[\"CVE-2026-16633\"]},{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "no_fix_refs": "[\"CVE-2026-76845\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9377-7eea-be58-1ce2c4381ef3"
    },
    {
      "id": "chg_01a18b40-9378-7518-886b-ac5c57f0fd6b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9378-7518-886b-ac5c57f0fd6b"
    },
    {
      "id": "chg_01a18b40-9378-7b51-8aaf-e837eada0f93",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114102",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114102",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-114102 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9378-7b51-8aaf-e837eada0f93"
    },
    {
      "id": "chg_01a18b40-9379-70aa-83d0-305b23a28a55",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-92000",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-92000",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-92000 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9379-70aa-83d0-305b23a28a55"
    },
    {
      "id": "chg_01a18b40-9379-7872-93f6-03452ef13b04",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-77301",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-77301",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-77301 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-9379-7872-93f6-03452ef13b04"
    },
    {
      "id": "chg_01a18b40-937a-70f7-a9c1-2ec9d6251e38",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114103",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114103",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-114103 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-937a-70f7-a9c1-2ec9d6251e38"
    },
    {
      "id": "chg_01a18b40-937a-762a-919c-0b686ffd97a2",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-937a-762a-919c-0b686ffd97a2"
    },
    {
      "id": "chg_01a18b40-937a-7ceb-af51-df09ec299119",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 05:20:27.206929+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a18b40-937a-7ceb-af51-df09ec299119"
    },
    {
      "id": "chg_01a1861d-4ed6-75d4-ad62-d3ad1903fa96",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-16633",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-16633",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-16633 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ed6-75d4-ad62-d3ad1903fa96"
    },
    {
      "id": "chg_01a1861d-4ed7-719a-bc86-bf4b9e741dde",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-102282",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-102282",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-102282 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ed7-719a-bc86-bf4b9e741dde"
    },
    {
      "id": "chg_01a1861d-4ed7-7be9-a83c-d169055cca57",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114104",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114104",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-114104 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ed7-7be9-a83c-d169055cca57"
    },
    {
      "id": "chg_01a1861d-4ed8-7e23-9505-c1985b82fd95",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-39244",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-39244",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-39244 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ed8-7e23-9505-c1985b82fd95"
    },
    {
      "id": "chg_01a1861d-4ed9-750f-9488-d5410f427f0e",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "adm-zip",
        "refs": "[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-39244\",\"CVE-2026-16633\",\"CVE-2023-54404\"]",
        "seen": "215",
        "direct": "3",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "216",
        "resolved": "215",
        "severity": "high",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":1,\"path\":[\"adm-zip\"],\"refs\":[\"CVE-2026-77301\",\"CVE-2026-114102\",\"CVE-2026-114103\",\"CVE-2026-102282\",\"CVE-2026-114104\",\"CVE-2026-92000\",\"CVE-2026-76845\",\"CVE-2026-39244\"]},{\"name\":\"pdfjs-dist\",\"version\":\"5.7.284\",\"depth\":1,\"path\":[\"pdfjs-dist\"],\"refs\":[\"CVE-2026-16633\"]},{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "no_fix_refs": "[\"CVE-2026-76845\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ed9-750f-9488-d5410f427f0e"
    },
    {
      "id": "chg_01a1861d-4eda-776d-a4de-7ab268bdd33c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4eda-776d-a4de-7ab268bdd33c"
    },
    {
      "id": "chg_01a1861d-4eda-7eb5-944e-ec4272b1cdce",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114102",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114102",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-114102 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4eda-7eb5-944e-ec4272b1cdce"
    },
    {
      "id": "chg_01a1861d-4edb-7bb4-ba75-194da6c180fa",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-92000",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-92000",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-92000 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4edb-7bb4-ba75-194da6c180fa"
    },
    {
      "id": "chg_01a1861d-4edc-7887-ac17-acaaf5499451",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-77301",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-77301",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-77301 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4edc-7887-ac17-acaaf5499451"
    },
    {
      "id": "chg_01a1861d-4edd-75ef-b553-9a2d77594b8d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114103",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114103",
        "severity": "high"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "CVE-2026-114103 affects this package (high)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4edd-75ef-b553-9a2d77594b8d"
    },
    {
      "id": "chg_01a1861d-4ede-71fb-92c1-94164dcc53ef",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4ede-71fb-92c1-94164dcc53ef"
    },
    {
      "id": "chg_01a1861d-4edf-7237-9834-17f07e669b86",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 05:23:49.859015+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/com-onadit-onadit/onadit#chg-chg_01a1861d-4edf-7237-9834-17f07e669b86"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 27,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-11-04",
      "total": 27,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-11-03",
      "total": 27,
      "delta": 5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-11-02",
      "total": 22,
      "delta": 6,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-11-01",
      "total": 16,
      "delta": -6,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-10-30",
      "total": 22,
      "delta": 6,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 18
    },
    {
      "date": "2026-10-29",
      "total": 16,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 18
    },
    {
      "date": "2026-10-28",
      "total": 16,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}