{
  "server": "comet-ml-opik-mcp",
  "component": "opik-mcp",
  "generated_at": "2026-08-03T22:36:47.171Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_019fc4b6-0e09-7aec-b279-7cf524df9221",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "comet-ml/opik-mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0e09-7aec-b279-7cf524df9221"
    },
    {
      "id": "chg_019fc4b6-0e0d-760f-a95c-3db97b42f7e2",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "comet-ml/opik-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "comet-ml/opik-mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (comet-ml/opik-mcp)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0e0d-760f-a95c-3db97b42f7e2"
    },
    {
      "id": "chg_019fc4b6-0dee-7168-bee2-2b1b85a636a3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-11525",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-11525",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-11525 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0dee-7168-bee2-2b1b85a636a3"
    },
    {
      "id": "chg_019fc4b6-0df3-7c38-9ff5-0a1ffec1b454",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1527",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1527",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1527 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df3-7c38-9ff5-0a1ffec1b454"
    },
    {
      "id": "chg_019fc4b6-0df4-7c29-aff6-f80649c2cef7",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-9679",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-9679",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-9679 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df4-7c29-aff6-f80649c2cef7"
    },
    {
      "id": "chg_019fc4b6-0df5-7758-b584-d11b3d81c2e6",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1525",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1525",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1525 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df5-7758-b584-d11b3d81c2e6"
    },
    {
      "id": "chg_019fc4b6-0df7-7a24-a906-5216517f9058",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-6733",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-6733",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-6733 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df7-7a24-a906-5216517f9058"
    },
    {
      "id": "chg_019fc4b6-0df8-7006-b114-9df2fb4b4b26",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-22036",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-22036",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-22036 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df8-7006-b114-9df2fb4b4b26"
    },
    {
      "id": "chg_019fc4b6-0df8-751e-b313-376bc6960537",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-12151",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-12151",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-12151 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0df8-751e-b313-376bc6960537"
    },
    {
      "id": "chg_019fc4b6-0dfa-7c5d-9c67-ce4dd8010245",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-2229",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-2229",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-2229 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0dfa-7c5d-9c67-ce4dd8010245"
    },
    {
      "id": "chg_019fc4b6-0dfb-71ff-a322-80111dc3b29c",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@ai-sdk/openai > @ai-sdk/provider-utils > undici",
        "refs": "[\"CVE-2026-1525\",\"CVE-2026-6733\",\"CVE-2026-1527\",\"CVE-2026-11525\",\"CVE-2026-22036\",\"CVE-2026-9679\",\"CVE-2026-2229\",\"CVE-2026-1526\",\"CVE-2026-12151\"]",
        "seen": "212",
        "package": "undici",
        "version": "5.29.0",
        "assessed": "212",
        "resolved": "211",
        "severity": "high",
        "transitive": "1",
        "unresolved": "1",
        "vulnerable": "[{\"name\":\"undici\",\"version\":\"5.29.0\",\"depth\":3,\"path\":[\"@ai-sdk/openai\",\"@ai-sdk/provider-utils\",\"undici\"],\"refs\":[\"CVE-2026-1525\",\"CVE-2026-6733\",\"CVE-2026-1527\",\"CVE-2026-11525\",\"CVE-2026-22036\",\"CVE-2026-9679\",\"CVE-2026-2229\",\"CVE-2026-1526\",\"CVE-2026-12151\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0dfb-71ff-a322-80111dc3b29c"
    },
    {
      "id": "chg_019fc4b6-0dfd-74b0-9829-50977dcef98b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1526",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1526",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1526 affects this package (high)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0dfd-74b0-9829-50977dcef98b"
    },
    {
      "id": "chg_019fc4b6-0e07-779a-91e3-4e56df3aa9bf",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:01:33.135738+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc4b6-0e07-779a-91e3-4e56df3aa9bf"
    },
    {
      "id": "chg_019fc20f-25d3-7792-aca7-e6e71f60e36e",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 10:40:00.433076+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fc20f-25d3-7792-aca7-e6e71f60e36e"
    },
    {
      "id": "chg_019fb760-a972-7e81-a726-1420bbdb591a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 08:53:13.171683+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/comet-ml-opik-mcp/opik-mcp#chg-chg_019fb760-a972-7e81-a726-1420bbdb591a"
    }
  ],
  "days": [
    {
      "date": "2026-08-02",
      "total": 43,
      "delta": 38,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 18
    },
    {
      "date": "2026-08-01",
      "total": 5,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-07-31",
      "total": 6,
      "delta": -18,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-07-27",
      "total": 24,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}