{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:28:00.331Z","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","markdownUrl":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a.md","server":{"slug":"embedded-society-altium-designer-mcp","name":"io.github.embedded-society/altium-designer-mcp","registryName":"io.github.embedded-society/altium-designer-mcp","description":"File I/O and primitive-placement tools so AI assistants can create and manage Altium libraries.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","type":"mcpb","identifier":"https://github.com/embedded-society/altium-designer-mcp/releases/download/v1.4.0/altium-designer-mcp.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","version":null,"transport":"stdio","scoredAt":"2026-11-05T05:01:26.011Z"},"score":{"total":19,"tier":"low","status":"scored","weekDelta":-1,"history":[{"date":"2026-11-05","total":19},{"date":"2026-11-04","total":19},{"date":"2026-11-03","total":20},{"date":"2026-11-02","total":20},{"date":"2026-11-01","total":20},{"date":"2026-10-31","total":20},{"date":"2026-10-30","total":20},{"date":"2026-10-29","total":20},{"date":"2026-10-28","total":19},{"date":"2026-10-27","total":20},{"date":"2026-10-26","total":20},{"date":"2026-10-25","total":20},{"date":"2026-10-24","total":20},{"date":"2026-10-23","total":20},{"date":"2026-10-22","total":20},{"date":"2026-10-21","total":20},{"date":"2026-10-20","total":20},{"date":"2026-10-19","total":20},{"date":"2026-10-18","total":20},{"date":"2026-10-17","total":20},{"date":"2026-10-16","total":20},{"date":"2026-10-15","total":20},{"date":"2026-10-14","total":20},{"date":"2026-10-13","total":20},{"date":"2026-10-12","total":9},{"date":"2026-10-11","total":9},{"date":"2026-10-05","total":20},{"date":"2026-10-04","total":20},{"date":"2026-10-03","total":20},{"date":"2026-10-02","total":20}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none)."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_manifest_bundled"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_manifest_bundled"}}]},{"name":"Provenance & Transparency","score":94,"verdict":"unverified","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to embedded-society/altium-designer-mcp).","Clear OSI-approved license (GPL-3.0-or-later).","Maintenance history not yet determined.","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"embedded-society/altium-designer-mcp"}},{"code":"license.osi","args":{"spdx":"GPL-3.0-or-later"}},{"code":"maintenance.inconclusive","args":{"reason":"no_publish_times"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: our sandbox could not run this package, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"not_attempted","status":"unreachable"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Install-script risk not yet assessed.","Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).","Maintenance history not yet determined.","Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess.","Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.","Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess.","Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.","Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","type":"mcpb","identifier":"https://github.com/embedded-society/altium-designer-mcp/releases/download/v1.4.0/altium-designer-mcp.mcpb","withdrawn":false,"score":19,"current":true,"url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","markdownUrl":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/embedded-society/altium-designer-mcp/releases/download/v1.4.0/altium-designer-mcp.mcpb"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"cc128d55461b646c01c6e5776b545bb855b50a207976b04b70f9be7444ddc44c"}],"install":{"available":true,"bundleSha256":"cc128d55461b646c01c6e5776b545bb855b50a207976b04b70f9be7444ddc44c"},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T05:01:25.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"github_attestations","discoveryLabel":"GitHub artifact attestations","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-09-25","recent":[{"id":"chg_01a1a51c-9d28-782a-8326-ee60497abfe2","kind":"check.unverifiable","summary":"Maintenance (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1a51c-9d28-782a-8326-ee60497abfe2"},{"id":"chg_01a1a51c-9d2b-7749-af05-e6cbbcc3f6a8","kind":"score.total_changed","summary":"Trust score (20 → 19)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1a51c-9d2b-7749-af05-e6cbbcc3f6a8"},{"id":"chg_01a19dd9-d3eb-7d9f-981a-2b2cc3daf919","kind":"score.total_changed","summary":"Trust score (19 → 20)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a19dd9-d3eb-7d9f-981a-2b2cc3daf919"},{"id":"chg_01a19b06-10d2-763f-899e-0cc7f4013d25","kind":"score.total_changed","summary":"Trust score (20 → 19)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a19b06-10d2-763f-899e-0cc7f4013d25"},{"id":"chg_01a19b06-10d0-7ef7-b69c-7bf54470b276","kind":"check.unverifiable","summary":"Security disclosure (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a19b06-10d0-7ef7-b69c-7bf54470b276"},{"id":"chg_01a18940-1353-788c-88b5-d7f9e8d0ce1f","kind":"score.total_changed","summary":"Trust score (19 → 20)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a18940-1353-788c-88b5-d7f9e8d0ce1f"},{"id":"chg_01a18940-1351-7705-b328-88278c0e411b","kind":"check.reverified","summary":"Maintenance (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a18940-1351-7705-b328-88278c0e411b"},{"id":"chg_01a180df-ef16-7bb2-902d-7ff5891f9558","kind":"check.unverifiable","summary":"Maintenance (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a180df-ef16-7bb2-902d-7ff5891f9558"},{"id":"chg_01a180df-ef17-7a11-b119-c062e62bf283","kind":"score.total_changed","summary":"Trust score (20 → 19)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a180df-ef17-7a11-b119-c062e62bf283"},{"id":"chg_01a164fd-1ff2-7009-b310-e39117e4551d","kind":"score.total_changed","summary":"Trust score (19 → 20)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a164fd-1ff2-7009-b310-e39117e4551d"},{"id":"chg_01a161e9-efde-761b-b5e0-0021749999ff","kind":"check.unverifiable","summary":"Maintenance (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a161e9-efde-761b-b5e0-0021749999ff"},{"id":"chg_01a161e9-efe0-72c3-bcf9-3c11a394eca8","kind":"score.total_changed","summary":"Trust score (20 → 19)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a161e9-efe0-72c3-bcf9-3c11a394eca8"},{"id":"chg_01a1339a-9e68-752c-aa37-d6aa9bfafbf7","kind":"score.total_changed","summary":"Trust score (9 → 20)","materiality":"functional","direction":"improvement","scoreDelta":11,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1339a-9e68-752c-aa37-d6aa9bfafbf7"},{"id":"chg_01a1339a-9e65-7f32-b941-2aa6aa2f4f99","kind":"check.reverified","summary":"Provenance (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1339a-9e65-7f32-b941-2aa6aa2f4f99"},{"id":"chg_01a1339a-9e67-757b-acf3-db3033e0799d","kind":"provenance.repo_changed","summary":"The attested source repository moved (embedded-society/altium-designer-mcp)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1339a-9e67-757b-acf3-db3033e0799d"},{"id":"chg_01a1339a-9e68-7124-b914-f32c341addfa","kind":"check.reverified","summary":"Security disclosure (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a1339a-9e68-7124-b914-f32c341addfa"},{"id":"chg_01a12d2d-592b-722a-8817-4d325776f641","kind":"check.unverifiable","summary":"Provenance (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a12d2d-592b-722a-8817-4d325776f641"},{"id":"chg_01a12d2d-5934-7b40-91ab-42a090ecd2c9","kind":"provenance.repo_changed","summary":"The attested source repository moved (embedded-society/altium-designer-mcp)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a12d2d-5934-7b40-91ab-42a090ecd2c9"},{"id":"chg_01a12d2d-5937-76ab-b38c-c752a393956e","kind":"check.unverifiable","summary":"Security disclosure (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a12d2d-5937-76ab-b38c-c752a393956e"},{"id":"chg_01a12d2d-5939-7e06-9b06-900581b5c8e1","kind":"score.total_changed","summary":"Trust score (20 → 9)","materiality":"functional","direction":"regression","scoreDelta":-11,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a#chg-chg_01a12d2d-5939-7e06-9b06-900581b5c8e1"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a/changelog.json"},"links":{"html":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a","markdown":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a.md","changelogJson":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a/changelog.json","changelogRss":"https://verifymcp.io/servers/embedded-society-altium-designer-mcp/https-github-com-embedded-society-altium-designer-mcp-releases-download-v1-1-0-a.xml","external":[{"label":"Repository","href":"https://github.com/embedded-society/altium-designer-mcp"},{"label":"Website","href":"https://github.com/embedded-society/altium-designer-mcp/blob/main/docs/USAGE.md"}]}}