{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "m-pineapple-hubspot-auditor",
  "component": "hubspot-auditor",
  "generated_at": "2026-11-05T04:52:42.655Z",
  "tracking_since": "2026-10-13",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a16c4b-1f73-71e1-9dd5-7ef1206247bd",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:03:44.977161+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a16c4b-1f73-71e1-9dd5-7ef1206247bd"
    },
    {
      "id": "chg_01a16c4b-1f74-7619-84d7-14a64f18bbd1",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "zod",
        "refs": "[\"CVE-2023-54404\"]",
        "seen": "114",
        "direct": "1",
        "package": "zod",
        "version": "3.25.76",
        "assessed": "115",
        "resolved": "114",
        "severity": "high",
        "vulnerable": "[{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:03:44.977161+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a16c4b-1f74-7619-84d7-14a64f18bbd1"
    },
    {
      "id": "chg_01a16c4b-1f74-7c93-8b08-630af9059499",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:03:44.977161+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a16c4b-1f74-7c93-8b08-630af9059499"
    },
    {
      "id": "chg_01a169a1-dc49-7712-b520-3120a324d1f0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 16:39:37.744741+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a169a1-dc49-7712-b520-3120a324d1f0"
    },
    {
      "id": "chg_01a15cd7-c585-7f0c-9b87-fef4b922a2f9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 05:03:27.081246+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a15cd7-c585-7f0c-9b87-fef4b922a2f9"
    },
    {
      "id": "chg_01a157dd-29fa-755b-8346-a7abeca72c98",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-20",
      "occurred_at": "2026-10-20 05:51:14.403049+00",
      "observed_since": "2026-10-19",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a157dd-29fa-755b-8346-a7abeca72c98"
    },
    {
      "id": "chg_01a14e7b-0050-7ca2-bd26-24151bc7a9f3",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 10:07:26.08395+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14e7b-0050-7ca2-bd26-24151bc7a9f3"
    },
    {
      "id": "chg_01a14e7b-0053-71d4-a1ef-530caecf9500",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.10",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 10:07:26.08395+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Stability (0.10 → unverified)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14e7b-0053-71d4-a1ef-530caecf9500"
    },
    {
      "id": "chg_01a14081-e459-7580-b57a-0d8e640634d7",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 17:00:15.85781+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14081-e459-7580-b57a-0d8e640634d7"
    },
    {
      "id": "chg_01a14081-e4af-70e7-ae0f-5a8ad9e777a7",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "M-Pineapple/hubspot-auditor"
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 17:00:15.85781+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14081-e4af-70e7-ae0f-5a8ad9e777a7"
    },
    {
      "id": "chg_01a14081-e4b5-7f3f-9aba-c116fd0923b2",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "M-Pineapple/hubspot-auditor",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "M-Pineapple/hubspot-auditor",
        "from": ""
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 17:00:15.85781+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "The attested source repository moved (M-Pineapple/hubspot-auditor)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14081-e4b5-7f3f-9aba-c116fd0923b2"
    },
    {
      "id": "chg_01a14081-e50d-77de-9fc3-24e9dd7c1137",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 17:00:15.85781+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a14081-e50d-77de-9fc3-24e9dd7c1137"
    },
    {
      "id": "chg_01a13bc2-c4de-7cb8-a1e4-42b611f84620",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 18:53:02.541196+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a13bc2-c4de-7cb8-a1e4-42b611f84620"
    },
    {
      "id": "chg_01a13bc2-c4df-7c21-b265-9313ee9aa965",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "2",
        "judged": "2"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 18:53:02.541196+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a13bc2-c4df-7c21-b265-9313ee9aa965"
    },
    {
      "id": "chg_01a13bc2-c4e0-7453-889a-33aa7d78a9f3",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 18:53:02.541196+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/m-pineapple-hubspot-auditor/hubspot-auditor#chg-chg_01a13bc2-c4e0-7453-889a-33aa7d78a9f3"
    }
  ],
  "days": [
    {
      "date": "2026-11-04",
      "total": 85,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-02",
      "total": 84,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 60,
        "to": 63,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 18,
          "to_days": 19
        },
        "partial": false,
        "compared_to": "2026-11-01",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-31",
      "total": 83,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 53,
        "to": 57,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 16,
          "to_days": 17
        },
        "partial": false,
        "compared_to": "2026-10-30",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-29",
      "total": 82,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 47,
        "to": 50,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 14,
          "to_days": 15
        },
        "partial": false,
        "compared_to": "2026-10-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-27",
      "total": 81,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 40,
        "to": 43,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 12,
          "to_days": 13
        },
        "partial": false,
        "compared_to": "2026-10-26",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-25",
      "total": 80,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 33,
        "to": 37,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 10,
          "to_days": 11
        },
        "partial": false,
        "compared_to": "2026-10-24",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-24",
      "total": 79,
      "delta": 10,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-23",
      "total": 69,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}