{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "io-nestr-mcp",
  "component": "nestr-mcp",
  "generated_at": "2026-09-27T11:24:26.057Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 30,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0d13c-07dc-7170-a2ea-3b277e4b9cef",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-24",
      "occurred_at": "2026-09-24 02:26:07.283053+00",
      "observed_since": "2026-09-23",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0d13c-07dc-7170-a2ea-3b277e4b9cef"
    },
    {
      "id": "chg_01a0d13c-07da-7521-87a5-19581177ff2d",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-24",
      "occurred_at": "2026-09-24 02:26:07.283053+00",
      "observed_since": "2026-09-23",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0d13c-07da-7521-87a5-19581177ff2d"
    },
    {
      "id": "chg_01a0ce5e-a3bc-786b-afd9-6216372ecb65",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 13:05:03.724428+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0ce5e-a3bc-786b-afd9-6216372ecb65"
    },
    {
      "id": "chg_01a0ce5e-a3be-794d-9bdc-c1dd2af136f4",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 13:05:03.724428+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0ce5e-a3be-794d-9bdc-c1dd2af136f4"
    },
    {
      "id": "chg_01a0c1ca-a696-7b94-b38c-238d8fb2df9a",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 02:27:58.639551+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0c1ca-a696-7b94-b38c-238d8fb2df9a"
    },
    {
      "id": "chg_01a0c1ca-a697-7ed8-a5d4-6b759e9928ce",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 02:27:58.639551+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0c1ca-a697-7ed8-a5d4-6b759e9928ce"
    },
    {
      "id": "chg_01a0bffa-55f0-7b31-acf6-048978ff7326",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 18:00:48.887697+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0bffa-55f0-7b31-acf6-048978ff7326"
    },
    {
      "id": "chg_01a0bffa-55f2-7b94-b3df-1beb495999a1",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 18:00:48.887697+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0bffa-55f2-7b94-b3df-1beb495999a1"
    },
    {
      "id": "chg_01a0936d-2844-7a0b-8075-24983ce8ffb0",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 02:23:19.533558+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a0936d-2844-7a0b-8075-24983ce8ffb0"
    },
    {
      "id": "chg_01a08f5d-b727-7351-b3eb-957ea17b7cd0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 07:27:58.573664+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a08f5d-b727-7351-b3eb-957ea17b7cd0"
    },
    {
      "id": "chg_01a06a37-95e2-7ace-9b95-8603c61c704d",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 02:20:22.815184+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a06a37-95e2-7ace-9b95-8603c61c704d"
    },
    {
      "id": "chg_01a06a37-95e3-79fa-90ba-88781aca30a5",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 02:20:22.815184+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a06a37-95e3-79fa-90ba-88781aca30a5"
    },
    {
      "id": "chg_01a06515-a024-74e0-8a94-d27e041516f4",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:25:11.131424+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a06515-a024-74e0-8a94-d27e041516f4"
    },
    {
      "id": "chg_01a06515-a025-757e-9c21-e59db557ee65",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:25:11.131424+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a06515-a025-757e-9c21-e59db557ee65"
    },
    {
      "id": "chg_01a05043-79fe-7efe-beb2-27631d0aa67a",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "167",
        "assessed": "168",
        "resolved": "167",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 01:23:14.494459+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a05043-79fe-7efe-beb2-27631d0aa67a"
    },
    {
      "id": "chg_01a04c30-6051-7bae-a606-ea477defd0fa",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 06:23:53.877422+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a04c30-6051-7bae-a606-ea477defd0fa"
    },
    {
      "id": "chg_01a00862-537a-7cf5-8b2c-517fc4147e39",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 02:24:16.695491+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a00862-537a-7cf5-8b2c-517fc4147e39"
    },
    {
      "id": "chg_01a005f0-69a3-7c45-85c8-f0c746dabe24",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 15:00:36.877347+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_01a005f0-69a3-7c45-85c8-f0c746dabe24"
    },
    {
      "id": "chg_019fdf3d-c405-70d1-85fb-13725987ebb4",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.none",
      "from_value": "partial",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "167",
        "assessed": "168",
        "resolved": "167",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 02:39:54.844325+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Known CVEs (partial → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fdf3d-c405-70d1-85fb-13725987ebb4"
    },
    {
      "id": "chg_019fda02-1f52-7b3d-a5fa-d78d1a44b871",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 02:16:39.946086+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fda02-1f52-7b3d-a5fa-d78d1a44b871"
    },
    {
      "id": "chg_019fd551-43fe-7851-b204-35436a2cf5a5",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 04:25:00.545992+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fd551-43fe-7851-b204-35436a2cf5a5"
    },
    {
      "id": "chg_019fcfc5-0f05-77ba-8715-ac102adc2c2f",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "167",
        "assessed": "167",
        "resolved": "166",
        "unresolved": "1",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:33:45.945309+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fcfc5-0f05-77ba-8715-ac102adc2c2f"
    },
    {
      "id": "chg_019fcfc5-0f04-7af0-bf36-713153b6caa0",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69207",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.tree_partial",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69207"
      },
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:33:45.945309+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "CVE-2026-69207 no longer affects this package",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fcfc5-0f04-7af0-bf36-713153b6caa0"
    },
    {
      "id": "chg_019fca92-f90d-7270-b73c-560e184aaea1",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69207",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69207",
        "severity": "medium"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 02:20:57.461641+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69207 affects this package (medium)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fca92-f90d-7270-b73c-560e184aaea1"
    },
    {
      "id": "chg_019fca92-f90d-7d6e-b5fd-ce55dbde22fe",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.transitive",
      "from_value": "partial",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@modelcontextprotocol/sdk > hono",
        "refs": "[\"CVE-2026-69207\"]",
        "seen": "167",
        "package": "hono",
        "version": "4.12.33",
        "assessed": "167",
        "resolved": "166",
        "severity": "medium",
        "transitive": "1",
        "unresolved": "1",
        "vulnerable": "[{\"name\":\"hono\",\"version\":\"4.12.33\",\"depth\":2,\"path\":[\"@modelcontextprotocol/sdk\",\"hono\"],\"refs\":[\"CVE-2026-69207\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 02:20:57.461641+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (partial → fail)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fca92-f90d-7d6e-b5fd-ce55dbde22fe"
    },
    {
      "id": "chg_019fc497-ff6c-7b9a-aa08-a3a06f0bd208",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:28:43.483559+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fc497-ff6c-7b9a-aa08-a3a06f0bd208"
    },
    {
      "id": "chg_019fc497-ff6d-7339-ab73-bbe68225d802",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "nestr-dev/nestr-mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:28:43.483559+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fc497-ff6d-7339-ab73-bbe68225d802"
    },
    {
      "id": "chg_019fc497-ff6d-77e7-8b6a-1aaf3b68d4e8",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.tree_partial",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "167",
        "assessed": "167",
        "resolved": "166",
        "unresolved": "1",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:28:43.483559+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fc497-ff6d-77e7-8b6a-1aaf3b68d4e8"
    },
    {
      "id": "chg_019fc497-ff6d-7c24-aad0-27714faefe85",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "nestr-dev/nestr-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "nestr-dev/nestr-mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:28:43.483559+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (nestr-dev/nestr-mcp)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fc497-ff6d-7c24-aad0-27714faefe85"
    },
    {
      "id": "chg_019fc237-e500-77f6-80a5-3ecd1a677674",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 11:24:30.836344+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/io-nestr-mcp/nestr-mcp#chg-chg_019fc237-e500-77f6-80a5-3ecd1a677674"
    }
  ],
  "days": [
    {
      "date": "2026-09-25",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-24",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-23",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-21",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-20",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-12",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-10",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}