{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "leadbay-leadbay-mcp",
  "component": "leadbay-mcp",
  "generated_at": "2026-09-20T19:24:09.825Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 45,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0aeae-2dfa-7234-8c1d-ebc809ed0ee0",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@sentry/node > @opentelemetry/core",
        "refs": "[\"CVE-2026-54285\"]",
        "seen": "190",
        "package": "@opentelemetry/core",
        "version": "1.30.1",
        "assessed": "191",
        "resolved": "190",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@opentelemetry/core\",\"version\":\"1.30.1\",\"depth\":2,\"path\":[\"@sentry/node\",\"@opentelemetry/core\"],\"refs\":[\"CVE-2026-54285\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 09:24:04.897643+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0aeae-2dfa-7234-8c1d-ebc809ed0ee0"
    },
    {
      "id": "chg_01a0a8ab-eceb-7d26-bb69-08afa9bf0fcc",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 05:23:54.586773+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a8ab-eceb-7d26-bb69-08afa9bf0fcc"
    },
    {
      "id": "chg_01a0a805-f265-70ac-ae9c-a990b127ddf7",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 02:22:37.061966+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a805-f265-70ac-ae9c-a990b127ddf7"
    },
    {
      "id": "chg_01a0a805-f266-7505-824e-33f27661782e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 02:22:37.061966+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a805-f266-7505-824e-33f27661782e"
    },
    {
      "id": "chg_01a0a805-f266-797c-a11c-497006de6dc1",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 02:22:37.061966+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a805-f266-797c-a11c-497006de6dc1"
    },
    {
      "id": "chg_01a0a351-5b3c-726e-b342-ef4c6d0439ef",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 04:26:52.906393+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a351-5b3c-726e-b342-ef4c6d0439ef"
    },
    {
      "id": "chg_01a0a351-5b3d-788a-9515-e260ecadff42",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 04:26:52.906393+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a0a351-5b3d-788a-9515-e260ecadff42"
    },
    {
      "id": "chg_01a09a16-a0e8-749e-9657-b46a3158aae2",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 09:26:09.092591+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a09a16-a0e8-749e-9657-b46a3158aae2"
    },
    {
      "id": "chg_01a09a16-a0e9-7b64-84d2-9383cac5bfeb",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 09:26:09.092591+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a09a16-a0e9-7b64-84d2-9383cac5bfeb"
    },
    {
      "id": "chg_01a09a16-a0ea-74d8-a335-9e8dd45d4806",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 09:26:09.092591+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a09a16-a0ea-74d8-a335-9e8dd45d4806"
    },
    {
      "id": "chg_01a09659-aec8-71b2-9c8d-32f83f0e1861",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 16:00:54.943431+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a09659-aec8-71b2-9c8d-32f83f0e1861"
    },
    {
      "id": "chg_01a09659-aec5-7913-9b9a-582b59017789",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 16:00:54.943431+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a09659-aec5-7913-9b9a-582b59017789"
    },
    {
      "id": "chg_01a094ed-efa6-72c4-824c-e2af18b2182f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 09:23:36.387311+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a094ed-efa6-72c4-824c-e2af18b2182f"
    },
    {
      "id": "chg_01a08dd2-d82f-7553-804f-71526b8a5bce",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 00:16:40.445728+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a08dd2-d82f-7553-804f-71526b8a5bce"
    },
    {
      "id": "chg_01a08dd2-d831-7009-8209-5129896ca693",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "leadbay/mcp"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 00:16:40.445728+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a08dd2-d831-7009-8209-5129896ca693"
    },
    {
      "id": "chg_01a08dd2-d832-7221-9f1d-ff082b8f0f96",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "leadbay/mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "leadbay/mcp",
        "from": ""
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 00:16:40.445728+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "The attested source repository moved (leadbay/mcp)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a08dd2-d832-7221-9f1d-ff082b8f0f96"
    },
    {
      "id": "chg_01a088f6-26d2-73a4-866c-481770157bd0",
      "kind": "check.unverifiable",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.verified",
      "to_code": "provenance.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "attestation_fetch_failed"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 01:37:08.23322+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Provenance (pass → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a088f6-26d2-73a4-866c-481770157bd0"
    },
    {
      "id": "chg_01a088f6-26d3-7d40-879f-d9582830bf62",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.verified",
      "to_code": "provenance.inconclusive",
      "from_value": "leadbay/mcp",
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "",
        "from": "leadbay/mcp"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 01:37:08.23322+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "The attested source repository moved (leadbay/mcp)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a088f6-26d3-7d40-879f-d9582830bf62"
    },
    {
      "id": "chg_01a06bc5-d5c1-7df5-afef-4e6caea8979f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@sentry/node > @opentelemetry/core",
        "refs": "[\"CVE-2026-54285\"]",
        "seen": "190",
        "package": "@opentelemetry/core",
        "version": "1.30.1",
        "assessed": "191",
        "resolved": "190",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@opentelemetry/core\",\"version\":\"1.30.1\",\"depth\":2,\"path\":[\"@sentry/node\",\"@opentelemetry/core\"],\"refs\":[\"CVE-2026-54285\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 09:35:22.342172+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a06bc5-d5c1-7df5-afef-4e6caea8979f"
    },
    {
      "id": "chg_01a05fe7-b1dc-77e7-904a-48a9cac3e4f3",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 02:16:54.927859+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05fe7-b1dc-77e7-904a-48a9cac3e4f3"
    },
    {
      "id": "chg_01a05fe7-b1dd-771b-aecc-150cd3145c6f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 02:16:54.927859+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05fe7-b1dd-771b-aecc-150cd3145c6f"
    },
    {
      "id": "chg_01a05fe7-b1dd-7c09-8db9-5afc2c9b700e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 02:16:54.927859+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05fe7-b1dd-7c09-8db9-5afc2c9b700e"
    },
    {
      "id": "chg_01a05fe7-b1de-7259-ac28-a1f979908319",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 02:16:54.927859+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05fe7-b1de-7259-ac28-a1f979908319"
    },
    {
      "id": "chg_01a05f33-fc76-77b2-a1d2-cbf23632f21a",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 23:00:37.57915+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05f33-fc76-77b2-a1d2-cbf23632f21a"
    },
    {
      "id": "chg_01a05f33-fc74-7c01-b753-efef28cfaa8d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 23:00:37.57915+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05f33-fc74-7c01-b753-efef28cfaa8d"
    },
    {
      "id": "chg_01a05f33-fc76-7127-9850-464f96b2acd2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 23:00:37.57915+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a05f33-fc76-7127-9850-464f96b2acd2"
    },
    {
      "id": "chg_01a04cd0-8d66-7a4d-8a85-e70b61d12c75",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 09:18:51.160099+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a04cd0-8d66-7a4d-8a85-e70b61d12c75"
    },
    {
      "id": "chg_01a04cd0-8d65-79fb-beca-efe0e0ddda4d",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@sentry/node > @opentelemetry/core",
        "refs": "[\"CVE-2026-54285\"]",
        "seen": "190",
        "package": "@opentelemetry/core",
        "version": "1.30.1",
        "assessed": "191",
        "resolved": "190",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@opentelemetry/core\",\"version\":\"1.30.1\",\"depth\":2,\"path\":[\"@sentry/node\",\"@opentelemetry/core\"],\"refs\":[\"CVE-2026-54285\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 09:18:51.160099+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a04cd0-8d65-79fb-beca-efe0e0ddda4d"
    },
    {
      "id": "chg_01a04cd0-8d66-7f27-8697-249bbd509bfa",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 09:18:51.160099+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a04cd0-8d66-7f27-8697-249bbd509bfa"
    },
    {
      "id": "chg_01a049f5-7e30-7627-ac37-352c4cbd8e39",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 20:00:20.124338+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a049f5-7e30-7627-ac37-352c4cbd8e39"
    },
    {
      "id": "chg_01a049bf-4587-78da-a236-e4a012c7d0d2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 19:01:06.748176+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a049bf-4587-78da-a236-e4a012c7d0d2"
    },
    {
      "id": "chg_01a049bf-458a-77d8-88a2-772d0db5281f",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 19:01:06.748176+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_01a049bf-458a-77d8-88a2-772d0db5281f"
    },
    {
      "id": "chg_019ffa69-627e-75a9-82d3-10a0244a315e",
      "kind": "check.reason",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.transitive",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "path": "@sentry/node > @opentelemetry/core",
        "refs": "[\"CVE-2026-54285\"]",
        "seen": "190",
        "package": "@opentelemetry/core",
        "version": "1.30.1",
        "assessed": "191",
        "resolved": "190",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@opentelemetry/core\",\"version\":\"1.30.1\",\"depth\":2,\"path\":[\"@sentry/node\",\"@opentelemetry/core\"],\"refs\":[\"CVE-2026-54285\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 09:17:18.314826+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Known CVEs (CVE check failed: a known medium-severity CVE affects @opentelemetry/core 1.30.1, reached via @sentry/node > @opentelemetry/core. A fixed version is available.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019ffa69-627e-75a9-82d3-10a0244a315e"
    },
    {
      "id": "chg_019ffa69-627d-7506-8ffe-2fe825de970b",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.transitive",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 09:17:18.314826+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 no longer affects this package",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019ffa69-627d-7506-8ffe-2fe825de970b"
    },
    {
      "id": "chg_019fc464-0a67-7aca-b740-39bd763c78f5",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-54285",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-54285",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-54285 affects this package (medium)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a67-7aca-b740-39bd763c78f5"
    },
    {
      "id": "chg_019fc464-0a69-71a6-84e4-6d0d1b3cff59",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@hono/node-server",
        "refs": "[\"GHSA-frvp-7c67-39w9\",\"CVE-2026-54285\"]",
        "seen": "190",
        "direct": "1",
        "package": "@hono/node-server",
        "version": "1.19.17",
        "assessed": "190",
        "resolved": "189",
        "severity": "medium",
        "transitive": "1",
        "unresolved": "1",
        "vulnerable": "[{\"name\":\"@hono/node-server\",\"version\":\"1.19.17\",\"depth\":1,\"path\":[\"@hono/node-server\"],\"refs\":[\"GHSA-frvp-7c67-39w9\"]},{\"name\":\"@opentelemetry/core\",\"version\":\"1.30.1\",\"depth\":2,\"path\":[\"@sentry/node\",\"@opentelemetry/core\"],\"refs\":[\"CVE-2026-54285\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a69-71a6-84e4-6d0d1b3cff59"
    },
    {
      "id": "chg_019fc464-0a6a-7625-b145-9eb8c5d4a759",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a6a-7625-b145-9eb8c5d4a759"
    },
    {
      "id": "chg_019fc464-0a6a-7b8b-8e07-fc15e4ec508f",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "leadbay/mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a6a-7b8b-8e07-fc15e4ec508f"
    },
    {
      "id": "chg_019fc464-0a6b-70e0-8095-3cd05d257cf0",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "leadbay/mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "leadbay/mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (leadbay/mcp)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a6b-70e0-8095-3cd05d257cf0"
    },
    {
      "id": "chg_019fc464-0a6b-7604-8f1e-a2be9b32b852",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a6b-7604-8f1e-a2be9b32b852"
    },
    {
      "id": "chg_019fc464-0a68-7b9a-a0d6-528cffd6e6de",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:58.422509+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 affects this package (medium)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc464-0a68-7b9a-a0d6-528cffd6e6de"
    },
    {
      "id": "chg_019fc379-ac94-7505-89e3-0f5926c95031",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 17:15:58.946189+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fc379-ac94-7505-89e3-0f5926c95031"
    },
    {
      "id": "chg_019fbe88-50fa-76c2-a757-ad94aef54ab4",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 18:13:52.490713+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fbe88-50fa-76c2-a757-ad94aef54ab4"
    },
    {
      "id": "chg_019fb9ff-fdf0-793b-af52-4d969f15a3c9",
      "kind": "check.appeared",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": null,
      "to_code": "stability.sandbox_failed",
      "from_value": null,
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 21:06:29.468318+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "First check of Stability (unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fb9ff-fdf0-793b-af52-4d969f15a3c9"
    },
    {
      "id": "chg_019fb176-044f-74b1-9271-eff67ce23c1d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 05:18:49.411777+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/leadbay-leadbay-mcp/leadbay-mcp#chg-chg_019fb176-044f-74b1-9271-eff67ce23c1d"
    }
  ],
  "days": [
    {
      "date": "2026-09-18",
      "total": 48,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 48,
      "delta": 10,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-16",
      "total": 38,
      "delta": -10,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 14
    },
    {
      "date": "2026-09-15",
      "total": 48,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-13",
      "total": 48,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-12",
      "total": 33,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-11",
      "total": 33,
      "delta": -4,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-09-10",
      "total": 37,
      "delta": -11,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    }
  ]
}