{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "groundhogday2011-byte-a2apay",
  "component": "a2apay-io",
  "generated_at": "2026-11-05T17:52:27.556Z",
  "tracking_since": "2026-10-12",
  "counts": {
    "critical": 3,
    "security": 4,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a16167-7df5-7c11-a4b2-d2e61cf424d1",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-6q48-6c7w-9gw2",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "none",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-6q48-6c7w-9gw2"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 02:18:54.799031+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "GHSA-6q48-6c7w-9gw2 no longer affects this package",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a16167-7df5-7c11-a4b2-d2e61cf424d1"
    },
    {
      "id": "chg_01a16167-7df6-7abc-ace4-12c5eec0d57d",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "5",
        "assessed": "6",
        "resolved": "5",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 02:18:54.799031+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a16167-7df6-7abc-ace4-12c5eec0d57d"
    },
    {
      "id": "chg_01a15c40-4074-775b-983d-a45f48db9321",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-6q48-6c7w-9gw2",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "none",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-6q48-6c7w-9gw2",
        "severity": "none"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 02:17:57.085837+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "GHSA-6q48-6c7w-9gw2 affects this package (none)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a15c40-4074-775b-983d-a45f48db9321"
    },
    {
      "id": "chg_01a15c40-4075-7dbb-b394-159dd60f6d12",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.unpatched_critical",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "requests > certifi",
        "refs": "[\"GHSA-6q48-6c7w-9gw2\"]",
        "seen": "5",
        "package": "certifi",
        "version": "2026.10.18",
        "assessed": "6",
        "resolved": "5",
        "severity": "none",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"certifi\",\"version\":\"2026.10.18\",\"depth\":2,\"path\":[\"requests\",\"certifi\"],\"refs\":[\"GHSA-6q48-6c7w-9gw2\",\"PYSEC-2026-4320\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 02:17:57.085837+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a15c40-4075-7dbb-b394-159dd60f6d12"
    },
    {
      "id": "chg_01a15c40-4076-7c90-aeec-e278d6e9f460",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 02:17:57.085837+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a15c40-4076-7c90-aeec-e278d6e9f460"
    },
    {
      "id": "chg_01a13af0-2fe7-75f8-9254-da81da9ea451",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unsupported"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 15:03:01.762657+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a13af0-2fe7-75f8-9254-da81da9ea451"
    },
    {
      "id": "chg_01a13af0-2fea-75a2-ba71-7a5aba18e9a2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "not_attempted",
        "status": "unsupported"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 15:03:01.762657+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/groundhogday2011-byte-a2apay/a2apay-io#chg-chg_01a13af0-2fea-75a2-ba71-7a5aba18e9a2"
    }
  ],
  "days": [
    {
      "date": "2026-10-22",
      "total": 36,
      "delta": 36,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-21",
      "total": 0,
      "delta": -36,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-14",
      "total": 36,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-12",
      "total": 36,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}