{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "gitgudatcodeing-vault-index",
  "component": "vault-index",
  "generated_at": "2026-11-05T08:23:36.643Z",
  "tracking_since": "2026-10-24",
  "counts": {
    "critical": 0,
    "security": 9,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a19bea-d1bb-7581-a1f3-de59f9fe1b5d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 11:00:19.997129+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a19bea-d1bb-7581-a1f3-de59f9fe1b5d"
    },
    {
      "id": "chg_01a197a1-93b3-7dd8-b41b-5e69dbacedca",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-01",
      "occurred_at": "2026-11-01 15:01:51.132409+00",
      "observed_since": "2026-10-31",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a197a1-93b3-7dd8-b41b-5e69dbacedca"
    },
    {
      "id": "chg_01a182d0-7c62-76f9-abe2-6bf19255207b",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 14:01:03.807134+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a182d0-7c62-76f9-abe2-6bf19255207b"
    },
    {
      "id": "chg_01a178ba-34ab-7a7e-879c-28d213bb75d2",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "CVE-2026-112403 no longer affects this package",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34ab-7a7e-879c-28d213bb75d2"
    },
    {
      "id": "chg_01a178ba-34ae-78dc-b617-be17c8790d8a",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "CVE-2026-112900 no longer affects this package",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34ae-78dc-b617-be17c8790d8a"
    },
    {
      "id": "chg_01a178ba-34b0-72e7-903f-8b742058c072",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "CVE-2026-96639 no longer affects this package",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34b0-72e7-903f-8b742058c072"
    },
    {
      "id": "chg_01a178ba-34b0-7b68-a969-a293288a777c",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "CVE-2026-112398 no longer affects this package",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34b0-7b68-a969-a293288a777c"
    },
    {
      "id": "chg_01a178ba-34b1-76d3-b023-616896835e9e",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "70",
        "assessed": "69",
        "resolved": "68",
        "unresolved": "2",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34b1-76d3-b023-616896835e9e"
    },
    {
      "id": "chg_01a178ba-34b2-770c-8af9-46c797838ee9",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 15:00:31.474023+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "CVE-2026-112393 no longer affects this package",
      "link": "https://verifymcp.io/servers/gitgudatcodeing-vault-index/vault-index#chg-chg_01a178ba-34b2-770c-8af9-46c797838ee9"
    }
  ],
  "days": [
    {
      "date": "2026-11-04",
      "total": 81,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 33,
        "to": 37,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 10,
          "to_days": 11
        },
        "partial": false,
        "compared_to": "2026-11-03",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-11-02",
      "total": 80,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-01",
      "total": 64,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 79,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 20,
        "to": 23,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 6,
          "to_days": 7
        },
        "partial": false,
        "compared_to": "2026-10-30",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-29",
      "total": 78,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 13,
        "to": 17,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 4,
          "to_days": 5
        },
        "partial": false,
        "compared_to": "2026-10-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-28",
      "total": 77,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-26",
      "total": 61,
      "delta": 61,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-10-24",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}