{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "csoai-org-yaml-ai-mcp",
  "component": "yaml-ai-mcp",
  "generated_at": "2026-09-21T07:03:54.918Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 22,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0c22c-9132-7429-85fd-1c3c2e272dc3",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 04:14:55.658998+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a0c22c-9132-7429-85fd-1c3c2e272dc3"
    },
    {
      "id": "chg_01a0b2b9-eeb0-7761-9a2f-1d46588bd23e",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 04:15:24.321225+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a0b2b9-eeb0-7761-9a2f-1d46588bd23e"
    },
    {
      "id": "chg_01a0a86c-e2cf-7323-8b52-d30a42bc58d4",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_verified",
      "to_code": "provenance.repo_http_error",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "status": "404"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 04:15:03.19961+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Source repository (pass → fail)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a0a86c-e2cf-7323-8b52-d30a42bc58d4"
    },
    {
      "id": "chg_01a0a86c-e2d0-7e63-b0bd-780db0a24e14",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 04:15:03.19961+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a0a86c-e2d0-7e63-b0bd-780db0a24e14"
    },
    {
      "id": "chg_01a09de6-7115-7aff-b546-9175796ee1a7",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 03:12:00.099702+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a09de6-7115-7aff-b546-9175796ee1a7"
    },
    {
      "id": "chg_01a05609-6de3-78f9-a331-483b5b80634a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 04:17:33.54118+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a05609-6de3-78f9-a331-483b5b80634a"
    },
    {
      "id": "chg_01a05074-4e34-708c-83b8-56e6caef30bc",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 02:16:34.530119+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a05074-4e34-708c-83b8-56e6caef30bc"
    },
    {
      "id": "chg_01a02288-7208-75b3-83af-aa713b7b93fa",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 04:16:02.44406+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a02288-7208-75b3-83af-aa713b7b93fa"
    },
    {
      "id": "chg_01a01cbc-bea6-7753-a247-c7f39936fbc8",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 01:15:26.70461+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a01cbc-bea6-7753-a247-c7f39936fbc8"
    },
    {
      "id": "chg_01a01af8-6dbf-7a31-a172-ca8db624b3f9",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 17:01:23.612074+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_01a01af8-6dbf-7a31-a172-ca8db624b3f9"
    },
    {
      "id": "chg_019ff8ae-aadb-73a0-af88-ff0bde0b5953",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 01:13:44.35841+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019ff8ae-aadb-73a0-af88-ff0bde0b5953"
    },
    {
      "id": "chg_019ff38c-c658-70f0-b227-196f438a4303",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 01:18:37.103386+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019ff38c-c658-70f0-b227-196f438a4303"
    },
    {
      "id": "chg_019fdef2-de6c-790f-ac91-cf78732374d9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 01:18:06.324694+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fdef2-de6c-790f-ac91-cf78732374d9"
    },
    {
      "id": "chg_019fd9c7-e61b-7431-8972-d1f011df98ad",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 01:13:04.239298+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fd9c7-e61b-7431-8972-d1f011df98ad"
    },
    {
      "id": "chg_019fd4b3-9108-7634-acd2-71c8e87c80d1",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 01:32:45.676219+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fd4b3-9108-7634-acd2-71c8e87c80d1"
    },
    {
      "id": "chg_019fca62-f410-7647-8d83-4bc5262c79c5",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "30",
        "assessed": "31",
        "resolved": "30",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 01:28:30.449209+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fca62-f410-7647-8d83-4bc5262c79c5"
    },
    {
      "id": "chg_019fc70b-ebae-7d03-8645-e7b5e8e2728c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:54:35.037175+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc70b-ebae-7d03-8645-e7b5e8e2728c"
    },
    {
      "id": "chg_019fc46e-904c-71e0-850f-e23a2c387337",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:43:27.991847+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc46e-904c-71e0-850f-e23a2c387337"
    },
    {
      "id": "chg_019fc46e-9057-7cde-93a4-88ac1ce9a9e7",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:43:27.991847+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc46e-9057-7cde-93a4-88ac1ce9a9e7"
    },
    {
      "id": "chg_019fc46e-9058-7469-ab09-734153619ae3",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:43:27.991847+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc46e-9058-7469-ab09-734153619ae3"
    },
    {
      "id": "chg_019fc1f7-8e32-7752-8c33-b43c6d4158e2",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 10:14:14.272522+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc1f7-8e32-7752-8c33-b43c6d4158e2"
    },
    {
      "id": "chg_019fc1f7-8e34-71e3-9cce-f039f1e96a18",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 10:14:14.272522+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/csoai-org-yaml-ai-mcp/yaml-ai-mcp#chg-chg_019fc1f7-8e34-71e3-9cce-f039f1e96a18"
    }
  ],
  "days": [
    {
      "date": "2026-09-21",
      "total": 16,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 31,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 16,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 17,
      "delta": -20,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-14",
      "total": 37,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-05",
      "total": 22,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-04",
      "total": 21,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-31",
      "total": 22,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}