io.github.CSOAI-ORG/supply-chain-mcp · supply-chain-mcp · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc5c4-76c4-7039-8e44-5db1b60ca38ahttps://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc5c4-76c4-7039-8e44-5db1b60ca38aMalware scan (pass → unverified). Compared against 2026-08-02.Mon, 03 Aug 2026 03:56:54 GMTsecurityregressioncheck.unverifiable[SECURITY] supply-chain-mcp: Malware scan (unverified → pass)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc071-3ee0-713f-b0d3-abcd00286043https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc071-3ee0-713f-b0d3-abcd00286043Malware scan (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 03:07:54 GMTsecurityimprovementcheck.reverified[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fb4cf-a2b8-788d-af47-352929fb8a72https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fb4cf-a2b8-788d-af47-352929fb8a72Malware scan (pass → unverified). Compared against 2026-07-29.Thu, 30 Jul 2026 20:55:34 GMTsecurityregressioncheck.unverifiable[SECURITY] supply-chain-mcp: Provenance (unverified → fail)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-74aa-bf10-5d74d7bd743ehttps://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-74aa-bf10-5d74d7bd743eProvenance (unverified → fail). Compared against 2026-07-28.Wed, 29 Jul 2026 13:32:19 GMTsecurityregressioncheck.reverified[SECURITY] supply-chain-mcp: Known CVEs (unverified → pass)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-7d33-acf8-6f0520741452https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-7d33-acf8-6f0520741452Known CVEs (unverified → pass). Compared against 2026-07-28.Wed, 29 Jul 2026 13:32:19 GMTsecurityimprovementcheck.reverified[SECURITY] supply-chain-mcp: Install scripts (unverified → pass)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7418-93c0-3535bd250244https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7418-93c0-3535bd250244Install scripts (unverified → pass). Compared against 2026-07-28.Wed, 29 Jul 2026 13:32:19 GMTsecurityimprovementcheck.reverified[SECURITY] supply-chain-mcp: The scripts that run when this package is installed changed (build_backend)https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7871-99e3-7d5dda684704https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7871-99e3-7d5dda684704The scripts that run when this package is installed changed (build_backend). Compared against 2026-07-28.Wed, 29 Jul 2026 13:32:19 GMTsecurityneutralinstallscript.hooks_changed