{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:39:09.416Z","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex","markdownUrl":"https://verifymcp.io/servers/jmcentire-kindex/kindex.md","server":{"slug":"jmcentire-kindex","name":"Kindex","registryName":"io.github.jmcentire/kindex","description":"Persistent knowledge graph and MCP server for AI workflows with git-tracked project context.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"kindex","type":"pypi","identifier":"kindex","withdrawn":false,"url":"https://verifymcp.io/servers/jmcentire-kindex/kindex","version":"0.37.0","transport":"stdio","scoredAt":"2026-11-05T07:34:19.948Z"},"score":{"total":34,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":34},{"date":"2026-11-04","total":49},{"date":"2026-11-03","total":34},{"date":"2026-11-02","total":49},{"date":"2026-11-01","total":49},{"date":"2026-10-31","total":49},{"date":"2026-10-30","total":49},{"date":"2026-10-29","total":34},{"date":"2026-10-28","total":49},{"date":"2026-10-27","total":49},{"date":"2026-10-26","total":49},{"date":"2026-10-25","total":34},{"date":"2026-10-24","total":34},{"date":"2026-10-23","total":34},{"date":"2026-10-22","total":34},{"date":"2026-10-21","total":34},{"date":"2026-10-20","total":34},{"date":"2026-10-19","total":34},{"date":"2026-10-18","total":49},{"date":"2026-10-17","total":34},{"date":"2026-10-16","total":34},{"date":"2026-10-15","total":34},{"date":"2026-10-14","total":34},{"date":"2026-10-13","total":34},{"date":"2026-10-12","total":49},{"date":"2026-10-08","total":34},{"date":"2026-10-04","total":34},{"date":"2026-10-03","total":34},{"date":"2026-10-02","total":34},{"date":"2026-10-01","total":34}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"unverified","reasons":["Malware scan not yet available for this package.","No known CVEs affecting this package version or its production dependencies.","Runs hatchling.build at install time, a recognised build step with no custom scripting around it.","0 of 10 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"vendor_no_verdict"}},{"code":"cve.none","args":{}},{"code":"installscript.allowlisted","args":{"tool":"hatchling.build","hooks":"build_backend"}},{"code":"dephealth.assessed","args":{"deps":"10","unhealthy":"0"}}]},{"name":"Provenance & Transparency","score":97,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to wandercom/kindex).","Clear OSI-approved license (MIT).","Actively maintained (last published 2 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"wandercom/kindex"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"2"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]}],"inconclusive":["Malware scan not yet available for this package.","Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess.","Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.","Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess.","Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.","Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"kindex","type":"pypi","identifier":"kindex","withdrawn":false,"score":34,"current":true,"url":"https://verifymcp.io/servers/jmcentire-kindex/kindex","markdownUrl":"https://verifymcp.io/servers/jmcentire-kindex/kindex.md"}],"facts":[{"label":"Registry","value":"pypi"},{"label":"Package","value":"kindex"},{"label":"Version","value":"0.37.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:34:19.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[{"hook":"build_backend","tier":"allowlisted"}],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":10,"partial":false,"deprecated":null,"stale":null,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-07-27","recent":[{"id":"chg_01a1aaa1-4c50-7821-b260-928bc169e809","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1aaa1-4c50-7821-b260-928bc169e809"},{"id":"chg_01a1aaa1-4c52-7960-840b-58e521cd8576","kind":"score.total_changed","summary":"Trust score (49 → 34)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1aaa1-4c52-7960-840b-58e521cd8576"},{"id":"chg_01a1a541-03d5-7dc8-8ccf-24b089512900","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1a541-03d5-7dc8-8ccf-24b089512900"},{"id":"chg_01a1a541-03db-7e23-82bf-18a772489de0","kind":"score.total_changed","summary":"Trust score (34 → 49)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1a541-03db-7e23-82bf-18a772489de0"},{"id":"chg_01a1a056-b3d7-7103-9750-a70c534958cb","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1a056-b3d7-7103-9750-a70c534958cb"},{"id":"chg_01a1a056-b3dc-7b34-bce5-dd0bbc5d51ef","kind":"score.total_changed","summary":"Trust score (49 → 34)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1a056-b3dc-7b34-bce5-dd0bbc5d51ef"},{"id":"chg_01a18b46-5df1-772d-bcb2-5322e39bef24","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a18b46-5df1-772d-bcb2-5322e39bef24"},{"id":"chg_01a18b46-5df6-7bde-8b27-67348a827277","kind":"score.total_changed","summary":"Trust score (34 → 49)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a18b46-5df6-7bde-8b27-67348a827277"},{"id":"chg_01a18694-670d-7ef9-b057-12149e5fa7fd","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a18694-670d-7ef9-b057-12149e5fa7fd"},{"id":"chg_01a18694-6710-7689-b196-ef857e34dbdd","kind":"score.total_changed","summary":"Trust score (49 → 34)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a18694-6710-7689-b196-ef857e34dbdd"},{"id":"chg_01a17674-2506-74e6-a1e4-d8102c50820b","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a17674-2506-74e6-a1e4-d8102c50820b"},{"id":"chg_01a17674-2507-768f-8aec-5dc57b21c698","kind":"score.total_changed","summary":"Trust score (34 → 49)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a17674-2507-768f-8aec-5dc57b21c698"},{"id":"chg_01a16284-951d-7cb9-beec-a4fa947246b2","kind":"check.measure","summary":"Dependency health (0.93 → 1.00)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a16284-951d-7cb9-beec-a4fa947246b2"},{"id":"chg_01a15d5c-d7c2-7349-aab4-262f35f5ce83","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a15d5c-d7c2-7349-aab4-262f35f5ce83"},{"id":"chg_01a15849-cac9-7455-b18b-e89ea6f9775f","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a15849-cac9-7455-b18b-e89ea6f9775f"},{"id":"chg_01a1530d-3235-75c7-bffd-13f7f87b26bd","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1530d-3235-75c7-bffd-13f7f87b26bd"},{"id":"chg_01a1530d-3236-7b46-8c3a-810452f98c22","kind":"score.total_changed","summary":"Trust score (49 → 34)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a1530d-3236-7b46-8c3a-810452f98c22"},{"id":"chg_01a14db4-ef56-7448-982a-723a1ee2e907","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a14db4-ef56-7448-982a-723a1ee2e907"},{"id":"chg_01a14db4-ef57-72e0-b804-fe413fcbbf08","kind":"score.total_changed","summary":"Trust score (34 → 49)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a14db4-ef57-72e0-b804-fe413fcbbf08"},{"id":"chg_01a13424-677a-7ca9-8b43-68dd8af8184c","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/jmcentire-kindex/kindex#chg-chg_01a13424-677a-7ca9-8b43-68dd8af8184c"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/jmcentire-kindex/kindex/changelog.json"},"links":{"html":"https://verifymcp.io/servers/jmcentire-kindex/kindex","markdown":"https://verifymcp.io/servers/jmcentire-kindex/kindex.md","changelogJson":"https://verifymcp.io/servers/jmcentire-kindex/kindex/changelog.json","changelogRss":"https://verifymcp.io/servers/jmcentire-kindex/kindex.xml","external":[{"label":"PyPI project","href":"https://pypi.org/project/kindex/"},{"label":"Socket report","href":"https://socket.dev/pypi/package/kindex"},{"label":"Repository","href":"https://github.com/wandercom/kindex"},{"label":"Website","href":"https://kindex.tools/"}]}}