{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "hzyai-ragscore",
  "component": "ragscore",
  "generated_at": "2026-09-24T18:28:03.097Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 23,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0af1c-fc47-75dd-9a1a-31cd761c91ba",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 11:25:07.113217+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a0af1c-fc47-75dd-9a1a-31cd761c91ba"
    },
    {
      "id": "chg_01a0aa19-2741-78ab-89e2-dbd39a09279d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 12:02:50.049634+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a0aa19-2741-78ab-89e2-dbd39a09279d"
    },
    {
      "id": "chg_01a09f9a-f0da-71b4-a348-930e6044a8f0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 11:08:46.331178+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a09f9a-f0da-71b4-a348-930e6044a8f0"
    },
    {
      "id": "chg_01a090cf-3ef3-7ccd-82e7-2a05056872f1",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 14:11:35.972307+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a090cf-3ef3-7ccd-82e7-2a05056872f1"
    },
    {
      "id": "chg_01a085d5-ab53-7d74-91c8-af59e16dc80a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 11:02:47.853646+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a085d5-ab53-7d74-91c8-af59e16dc80a"
    },
    {
      "id": "chg_01a066fb-d5a3-76e8-a375-0bff74f84f7a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 11:16:15.310237+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a066fb-d5a3-76e8-a375-0bff74f84f7a"
    },
    {
      "id": "chg_01a061c7-1c2d-7a61-937d-e6ed0ba588d9",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 11:00:33.659588+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a061c7-1c2d-7a61-937d-e6ed0ba588d9"
    },
    {
      "id": "chg_01a047a0-1d5b-79df-84f9-4f50efb26ff1",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 09:07:50.502395+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a047a0-1d5b-79df-84f9-4f50efb26ff1"
    },
    {
      "id": "chg_01a042e2-8adb-71d5-939b-4c74a12aaba6",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 11:02:18.032779+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a042e2-8adb-71d5-939b-4c74a12aaba6"
    },
    {
      "id": "chg_01a03894-2ea7-757f-886c-0c244304e58e",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 11:00:30.356994+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_01a03894-2ea7-757f-886c-0c244304e58e"
    },
    {
      "id": "chg_019ffa29-f963-746b-a49e-1a4919d8709b",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 08:08:02.640773+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019ffa29-f963-746b-a49e-1a4919d8709b"
    },
    {
      "id": "chg_019ff516-d54d-78e3-af54-d77adeb03b97",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 08:29:02.113223+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019ff516-d54d-78e3-af54-d77adeb03b97"
    },
    {
      "id": "chg_019fe07b-6aa5-7052-9536-f26b56dec1de",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 08:26:52.427215+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fe07b-6aa5-7052-9536-f26b56dec1de"
    },
    {
      "id": "chg_019fd0f6-21a9-78aa-abb0-243c34c4928b",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 08:06:59.159472+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fd0f6-21a9-78aa-abb0-243c34c4928b"
    },
    {
      "id": "chg_019fcc57-df5b-78db-96d5-669a877ee514",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:35:38.701837+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fcc57-df5b-78db-96d5-669a877ee514"
    },
    {
      "id": "chg_019fc6a7-6f75-73a1-a270-3ffd2ee44f09",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:04:49.635881+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fc6a7-6f75-73a1-a270-3ffd2ee44f09"
    },
    {
      "id": "chg_019fc288-fe40-7ce2-9171-8f2f69056bc3",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 12:53:05.710117+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fc288-fe40-7ce2-9171-8f2f69056bc3"
    },
    {
      "id": "chg_019fb2e2-07ff-796b-9a6a-8f74fb8663f0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 11:56:25.459674+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fb2e2-07ff-796b-9a6a-8f74fb8663f0"
    },
    {
      "id": "chg_019fa753-8614-7985-a4b0-bc62aa4ced6b",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 06:04:56.710651+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fa753-8614-7985-a4b0-bc62aa4ced6b"
    },
    {
      "id": "chg_019fa753-8614-7f36-8347-688e64334ebd",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "pypdf2",
        "refs": "[\"CVE-2023-36464\",\"CVE-2023-36464\"]",
        "seen": "36",
        "direct": "1",
        "package": "pypdf2",
        "version": "3.0.1",
        "assessed": "37",
        "resolved": "36",
        "severity": "medium",
        "vulnerable": "[{\"name\":\"pypdf2\",\"version\":\"3.0.1\",\"depth\":1,\"path\":[\"pypdf2\"],\"refs\":[\"CVE-2023-36464\",\"CVE-2023-36464\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 06:04:56.710651+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fa753-8614-7f36-8347-688e64334ebd"
    },
    {
      "id": "chg_019fa753-8615-7517-bbb6-7cecaf048c2d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-36464",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-36464",
        "severity": "medium"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 06:04:56.710651+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "CVE-2023-36464 affects this package (medium)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fa753-8615-7517-bbb6-7cecaf048c2d"
    },
    {
      "id": "chg_019fa753-8615-7a3a-9e08-01525980b0d3",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "setuptools.build_meta",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 06:04:56.710651+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fa753-8615-7a3a-9e08-01525980b0d3"
    },
    {
      "id": "chg_019fa753-8616-7233-a74e-19a7cf4ecda1",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 06:04:56.710651+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/hzyai-ragscore/ragscore#chg-chg_019fa753-8616-7233-a74e-19a7cf4ecda1"
    }
  ],
  "days": [
    {
      "date": "2026-09-17",
      "total": 21,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 36,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 21,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 36,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-09",
      "total": 21,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-03",
      "total": 36,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-02",
      "total": 21,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-28",
      "total": 36,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}