{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "extensiondev-mcp",
  "component": "extension-dev-mcp",
  "generated_at": "2026-09-20T19:05:14.661Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 30,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0bc64-2852-711f-a178-5370a738a473",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 01:17:55.597531+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a0bc64-2852-711f-a178-5370a738a473"
    },
    {
      "id": "chg_01a0a7cc-5e3c-7806-bd38-5b3ba773b220",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 01:19:43.529835+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a0a7cc-5e3c-7806-bd38-5b3ba773b220"
    },
    {
      "id": "chg_01a09d7f-ce07-77a0-915f-173dc80e5d25",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 01:19:53.797356+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a09d7f-ce07-77a0-915f-173dc80e5d25"
    },
    {
      "id": "chg_01a07974-1c21-7284-8fa9-22d6acb67610",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 01:20:47.5969+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a07974-1c21-7284-8fa9-22d6acb67610"
    },
    {
      "id": "chg_01a069fd-29e7-79e8-b24d-61eaa58c3933",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 01:16:33.930541+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a069fd-29e7-79e8-b24d-61eaa58c3933"
    },
    {
      "id": "chg_01a02708-1289-7d30-a382-a21d991ecec1",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 01:13:55.528275+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a02708-1289-7d30-a382-a21d991ecec1"
    },
    {
      "id": "chg_01a025dc-6dea-7b49-a639-9f6da6fbf950",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 19:46:37.94519+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a025dc-6dea-7b49-a639-9f6da6fbf950"
    },
    {
      "id": "chg_01a025dc-6deb-7c57-b448-57971144d702",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-56876",
      "subject_child": "",
      "from_code": "cve.no_fix_available",
      "to_code": "cve.no_fix_available",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-56876"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 19:46:37.94519+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "CVE-2026-56876 no longer affects this package",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a025dc-6deb-7c57-b448-57971144d702"
    },
    {
      "id": "chg_01a0126f-5741-7646-8ff7-903a1b79cd01",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 01:14:41.812674+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a0126f-5741-7646-8ff7-903a1b79cd01"
    },
    {
      "id": "chg_01a0117b-d8c3-76af-b0b1-aa8dd61af216",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 20:48:44.119931+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_01a0117b-d8c3-76af-b0b1-aa8dd61af216"
    },
    {
      "id": "chg_019ff8ad-d56c-7a26-976c-af2a02a02546",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-56876",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.no_fix_available",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-56876",
        "severity": ""
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 01:12:49.732241+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "CVE-2026-56876 affects this package",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019ff8ad-d56c-7a26-976c-af2a02a02546"
    },
    {
      "id": "chg_019fdf35-61d9-7ca2-8e10-6494806118e5",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-71329",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.no_fix_available",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-71329",
        "severity": ""
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:30:45.426502+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "CVE-2025-71329 affects this package",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fdf35-61d9-7ca2-8e10-6494806118e5"
    },
    {
      "id": "chg_019fdf35-61db-71bf-9d88-52fe13474999",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.07",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:30:45.426502+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Stability (0.07 → unverified)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fdf35-61db-71bf-9d88-52fe13474999"
    },
    {
      "id": "chg_019fdf35-61db-782d-be72-d8aa24aca301",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.no_fix_available",
      "from_value": "pass",
      "to_value": "partial",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"CVE-2025-71329\",\"CVE-2025-71330\"]",
        "seen": "355",
        "package": "image-size",
        "assessed": "356",
        "resolved": "355",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"image-size\",\"version\":\"0.5.5\",\"depth\":3,\"path\":[\"extension-develop\",\"less\",\"image-size\"],\"refs\":[\"CVE-2025-71329\",\"CVE-2025-71330\"]}]",
        "no_fix_refs": "[\"CVE-2025-71329\",\"CVE-2025-71330\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:30:45.426502+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Known CVEs (pass → partial)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fdf35-61db-782d-be72-d8aa24aca301"
    },
    {
      "id": "chg_019fdf35-61db-7e7e-a002-49499b210d61",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-71330",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.no_fix_available",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-71330",
        "severity": ""
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:30:45.426502+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "CVE-2025-71330 affects this package",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fdf35-61db-7e7e-a002-49499b210d61"
    },
    {
      "id": "chg_019fd9c7-935a-7e33-a796-f7cd7de0b66a",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.none",
      "from_value": "partial",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "354",
        "assessed": "355",
        "resolved": "354",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 01:12:43.024567+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Known CVEs (partial → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fd9c7-935a-7e33-a796-f7cd7de0b66a"
    },
    {
      "id": "chg_019fcdb8-89a4-787f-abb0-ee15d4c6bc27",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69153",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.tree_partial",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69153"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 17:00:50.961567+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69153 no longer affects this package",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fcdb8-89a4-787f-abb0-ee15d4c6bc27"
    },
    {
      "id": "chg_019fcdb8-89a5-7725-8132-cb968a067606",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "482",
        "assessed": "251",
        "resolved": "250",
        "unresolved": "232",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 17:00:50.961567+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fcdb8-89a5-7725-8132-cb968a067606"
    },
    {
      "id": "chg_019fcdb8-89a5-7c7f-88d7-1499b309ee80",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 17:00:50.961567+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fcdb8-89a5-7c7f-88d7-1499b309ee80"
    },
    {
      "id": "chg_019fc9a4-f46d-7a7d-841d-cc76b862fef4",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.transitive",
      "from_value": "partial",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "extension-develop > postcss",
        "refs": "[\"CVE-2026-69153\"]",
        "seen": "482",
        "package": "postcss",
        "version": "8.5.18",
        "assessed": "251",
        "resolved": "250",
        "severity": "medium",
        "transitive": "1",
        "unresolved": "232",
        "vulnerable": "[{\"name\":\"postcss\",\"version\":\"8.5.18\",\"depth\":2,\"path\":[\"extension-develop\",\"postcss\"],\"refs\":[\"CVE-2026-69153\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 22:00:58.718574+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Known CVEs (partial → fail)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc9a4-f46d-7a7d-841d-cc76b862fef4"
    },
    {
      "id": "chg_019fc9a4-f46e-74fe-aed6-9c79c47616eb",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69153",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69153",
        "severity": "medium"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 22:00:58.718574+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "CVE-2026-69153 affects this package (medium)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc9a4-f46e-74fe-aed6-9c79c47616eb"
    },
    {
      "id": "chg_019fc59b-d72c-7859-9e86-6865fd6fa7c6",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.inconclusive",
      "from_value": "partial",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 03:12:32.504212+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Known CVEs (partial → unverified)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc59b-d72c-7859-9e86-6865fd6fa7c6"
    },
    {
      "id": "chg_019fc531-29c5-73ca-8286-cf9cf05948db",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 01:16:01.268506+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc531-29c5-73ca-8286-cf9cf05948db"
    },
    {
      "id": "chg_019fc4b9-d94b-7295-b3e3-d5cc7e30ad6b",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:05:41.647771+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc4b9-d94b-7295-b3e3-d5cc7e30ad6b"
    },
    {
      "id": "chg_019fc4b9-d955-7235-a352-ec72472a4531",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "extensiondev/mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:05:41.647771+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc4b9-d955-7235-a352-ec72472a4531"
    },
    {
      "id": "chg_019fc4b9-d95a-782b-95ae-1199bb1e8294",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.tree_partial",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "482",
        "assessed": "251",
        "resolved": "250",
        "unresolved": "232",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:05:41.647771+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc4b9-d95a-782b-95ae-1199bb1e8294"
    },
    {
      "id": "chg_019fc4b9-d964-7115-9d89-69a4da5a101d",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "extensiondev/mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "extensiondev/mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:05:41.647771+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (extensiondev/mcp)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fc4b9-d964-7115-9d89-69a4da5a101d"
    },
    {
      "id": "chg_019fbcb3-b670-7504-bb0c-bf5803866d7c",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 09:42:02.081029+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fbcb3-b670-7504-bb0c-bf5803866d7c"
    },
    {
      "id": "chg_019fbcb3-b671-70b6-8f44-4b02ad60e566",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 09:42:02.081029+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fbcb3-b671-70b6-8f44-4b02ad60e566"
    },
    {
      "id": "chg_019fb1c3-3bae-7c7f-b5d0-36282d410ee5",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 06:43:09.863899+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/extensiondev-mcp/extension-dev-mcp#chg-chg_019fb1c3-3bae-7c7f-b5d0-36282d410ee5"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 90,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-19",
      "total": 90,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 89,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 89,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 90,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 90,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 90,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 90,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 93,
        "to": 97,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 28,
          "to_days": 29
        },
        "partial": false,
        "compared_to": "2026-09-12",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}