<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.hxckya/pkgtruth · pkgtruth · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] pkgtruth: Known CVEs (unverified → pass)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08f51-06de-7cd1-80ce-0895d2a0632a</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08f51-06de-7cd1-80ce-0895d2a0632a</guid><description>Known CVEs (unverified → pass). Compared against 2026-09-10.</description><pubDate>Fri, 11 Sep 2026 07:14:06 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] pkgtruth: Known CVEs (pass → unverified)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a0894e-03f4-7501-8c53-2c2b79a455fd</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a0894e-03f4-7501-8c53-2c2b79a455fd</guid><description>Known CVEs (pass → unverified). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 03:13:06 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] pkgtruth: Provenance (pass → fail)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c453-7b15-8d2e-bf81534fa4ac</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c453-7b15-8d2e-bf81534fa4ac</guid><description>Provenance (pass → fail). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 02:12:45 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] pkgtruth: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c455-76ab-b9ec-e544b5933c19</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c455-76ab-b9ec-e544b5933c19</guid><description>Tool safety (pass → unverified). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 02:12:45 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] pkgtruth: Stability (0.30 → unverified)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c456-71c1-a384-ab981ae5cb46</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c456-71c1-a384-ab981ae5cb46</guid><description>Stability (0.30 → unverified). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 02:12:45 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] pkgtruth: The attested source repository moved (hxckya/pkgtruth)</title><link>https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c456-7840-a060-e198d9e519b5</link><guid isPermaLink="true">https://verifymcp.io/servers/hxckya-pkgtruth/pkgtruth#chg-chg_01a08916-c456-7840-a060-e198d9e519b5</guid><description>The attested source repository moved (hxckya/pkgtruth). Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 02:12:45 GMT</pubDate><category>security</category><category>neutral</category><category>provenance.repo_changed</category></item></channel></rss>