{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "dvdsosa-zotero-native-mcp",
  "component": "zotero-native-mcp",
  "generated_at": "2026-11-06T16:59:43.339Z",
  "tracking_since": "2026-09-03",
  "counts": {
    "critical": 0,
    "security": 12,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a19534-eb59-7851-b201-c1cb57ef5099",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-01",
      "occurred_at": "2026-11-01 03:43:55.701542+00",
      "observed_since": "2026-10-31",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a19534-eb59-7851-b201-c1cb57ef5099"
    },
    {
      "id": "chg_01a17125-c7f6-7bc4-ab1a-412a2e29b3e6",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 03:41:03.770339+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a17125-c7f6-7bc4-ab1a-412a2e29b3e6"
    },
    {
      "id": "chg_01a16c01-c625-7ab4-ae49-778146f61785",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 03:43:37.968503+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a16c01-c625-7ab4-ae49-778146f61785"
    },
    {
      "id": "chg_01a16c01-c627-7bca-8d3b-92d3ea40b763",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "zod",
        "refs": "[\"CVE-2023-54404\"]",
        "seen": "93",
        "direct": "1",
        "package": "zod",
        "version": "3.25.76",
        "assessed": "94",
        "resolved": "93",
        "severity": "high",
        "vulnerable": "[{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 03:43:37.968503+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a16c01-c627-7bca-8d3b-92d3ea40b763"
    },
    {
      "id": "chg_01a14d1b-dffe-7705-a16e-e51a10a5c14f",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 03:43:54.811968+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a14d1b-dffe-7705-a16e-e51a10a5c14f"
    },
    {
      "id": "chg_01a13b59-8ff8-7cef-b80a-c882ccc6c7db",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 16:58:07.548239+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a13b59-8ff8-7cef-b80a-c882ccc6c7db"
    },
    {
      "id": "chg_01a12d88-6b72-7ad6-b35d-89cb399b4fb0",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.80",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 00:34:36.852464+00",
      "observed_since": "2026-10-05",
      "source": "scan",
      "summary": "Stability (0.80 → unverified)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a12d88-6b72-7ad6-b35d-89cb399b4fb0"
    },
    {
      "id": "chg_01a12d88-6bd0-71b1-8488-cc3ba6038879",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 00:34:36.852464+00",
      "observed_since": "2026-10-05",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a12d88-6bd0-71b1-8488-cc3ba6038879"
    },
    {
      "id": "chg_01a0ffd0-0df6-7586-8b28-64a7db9b65ab",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-03",
      "occurred_at": "2026-10-03 03:30:20.155448+00",
      "observed_since": "2026-10-02",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a0ffd0-0df6-7586-8b28-64a7db9b65ab"
    },
    {
      "id": "chg_01a069f8-4476-7ee0-ac69-0826d31440fe",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 01:11:13.236642+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a069f8-4476-7ee0-ac69-0826d31440fe"
    },
    {
      "id": "chg_01a069f8-4477-7636-9a63-2f715a477ba5",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "dvdsosa/zotero-native-mcp"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 01:11:13.236642+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a069f8-4477-7636-9a63-2f715a477ba5"
    },
    {
      "id": "chg_01a069f8-4478-73de-bc96-6c4b5a997fda",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "dvdsosa/zotero-native-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "dvdsosa/zotero-native-mcp",
        "from": ""
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 01:11:13.236642+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "The attested source repository moved (dvdsosa/zotero-native-mcp)",
      "link": "https://verifymcp.io/servers/dvdsosa-zotero-native-mcp/zotero-native-mcp#chg-chg_01a069f8-4478-73de-bc96-6c4b5a997fda"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-01",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-27",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-25",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-24",
      "total": 88,
      "delta": -5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    }
  ]
}