{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "moin105-karst",
  "component": "karst",
  "generated_at": "2026-11-05T13:51:18.915Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 7,
    "security": 44,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1abc3-2a15-748b-a796-bac1a8b7f4c8",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 12:50:56.619656+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a1abc3-2a15-748b-a796-bac1a8b7f4c8"
    },
    {
      "id": "chg_01a1a438-14c9-7648-97d1-77de84bf781a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 01:41:41.11879+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a1a438-14c9-7648-97d1-77de84bf781a"
    },
    {
      "id": "chg_01a1a18a-8a98-7416-9191-35b3c0f27aa1",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-03",
      "occurred_at": "2026-11-03 13:12:53.533967+00",
      "observed_since": "2026-11-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a1a18a-8a98-7416-9191-35b3c0f27aa1"
    },
    {
      "id": "chg_01a18fe4-3adb-7380-92fc-2108cf1d34a7",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 02:57:41.463995+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a18fe4-3adb-7380-92fc-2108cf1d34a7"
    },
    {
      "id": "chg_01a17bb1-a1ce-7198-8c55-ca2fc237a88f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-27",
      "occurred_at": "2026-10-27 04:50:00.960098+00",
      "observed_since": "2026-10-26",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17bb1-a1ce-7198-8c55-ca2fc237a88f"
    },
    {
      "id": "chg_01a1767e-d397-72ed-9903-a261fe0c19e3",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 04:36:25.57757+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a1767e-d397-72ed-9903-a261fe0c19e3"
    },
    {
      "id": "chg_01a17167-6a98-7f31-b9bb-f1192798ae35",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112403 no longer affects this package",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a98-7f31-b9bb-f1192798ae35"
    },
    {
      "id": "chg_01a17167-6a9a-79af-83ed-ce747d495bb4",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112900 no longer affects this package",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a9a-79af-83ed-ce747d495bb4"
    },
    {
      "id": "chg_01a17167-6a9a-7dfa-a4a8-a84036e45556",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-96639 no longer affects this package",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a9a-7dfa-a4a8-a84036e45556"
    },
    {
      "id": "chg_01a17167-6a9b-728b-9258-a0aa5c27fb97",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112398 no longer affects this package",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a9b-728b-9258-a0aa5c27fb97"
    },
    {
      "id": "chg_01a17167-6a9b-766f-8bd8-e7a6192735e8",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "76",
        "assessed": "75",
        "resolved": "74",
        "unresolved": "2",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a9b-766f-8bd8-e7a6192735e8"
    },
    {
      "id": "chg_01a17167-6a9b-7a69-9ffb-6e53c10ee57b",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 04:52:45.208799+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112393 no longer affects this package",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a17167-6a9b-7a69-9ffb-6e53c10ee57b"
    },
    {
      "id": "chg_01a16c2f-0751-7731-b2a0-f8e7c7ea631c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 04:33:03.783876+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-112398 affects this package (high)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a16c2f-0751-7731-b2a0-f8e7c7ea631c"
    },
    {
      "id": "chg_01a16717-662f-74a3-be97-1bc37a9dada4",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 04:49:09.128691+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-96639 affects this package (high)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a16717-662f-74a3-be97-1bc37a9dada4"
    },
    {
      "id": "chg_01a161e2-74b5-7134-8e60-da1ebfbd4d1e",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 04:33:13.304295+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112393 affects this package (high)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a161e2-74b5-7134-8e60-da1ebfbd4d1e"
    },
    {
      "id": "chg_01a161e2-74b6-7b8e-8c75-9241c79560a9",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 04:33:13.304295+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112900 affects this package (high)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a161e2-74b6-7b8e-8c75-9241c79560a9"
    },
    {
      "id": "chg_01a15ccb-e931-7eb9-a233-aa2bf80678a4",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.unpatched_critical",
      "from_value": "partial",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "fastembed > pillow",
        "refs": "[\"CVE-2026-112403\"]",
        "seen": "76",
        "package": "pillow",
        "version": "12.3.0",
        "assessed": "75",
        "resolved": "74",
        "severity": "high",
        "transitive": "1",
        "unresolved": "2",
        "vulnerable": "[{\"name\":\"pillow\",\"version\":\"12.3.0\",\"depth\":2,\"path\":[\"fastembed\",\"pillow\"],\"refs\":[\"CVE-2026-112395\",\"CVE-2026-112397\",\"CVE-2026-112400\",\"CVE-2026-112403\",\"CVE-2026-112404\",\"CVE-2026-112895\",\"CVE-2026-112896\",\"CVE-2026-112897\",\"CVE-2026-112899\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 04:50:29.760795+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (partial → fail)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a15ccb-e931-7eb9-a233-aa2bf80678a4"
    },
    {
      "id": "chg_01a15ccb-e935-70ba-a22a-e3ee7a6764a8",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 04:50:29.760795+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-112403 affects this package (high)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a15ccb-e935-70ba-a22a-e3ee7a6764a8"
    },
    {
      "id": "chg_01a15ccb-e936-7703-b3cd-94f4abd56df8",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 04:50:29.760795+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a15ccb-e936-7703-b3cd-94f4abd56df8"
    },
    {
      "id": "chg_01a13318-02ba-74b3-b874-be244b6fe586",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.tree_partial",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "76",
        "assessed": "75",
        "resolved": "74",
        "unresolved": "2",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 02:29:33.952073+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a13318-02ba-74b3-b874-be244b6fe586"
    },
    {
      "id": "chg_01a10e15-05fa-7488-a3f6-a377d48ced2a",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.inconclusive",
      "from_value": "partial",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "resolver_unavailable"
      },
      "occurred_on": "2026-10-05",
      "occurred_at": "2026-10-05 22:00:16.529277+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Known CVEs (partial → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a10e15-05fa-7488-a3f6-a377d48ced2a"
    },
    {
      "id": "chg_01a10612-b344-77ac-95a8-5479866e37ab",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-04",
      "occurred_at": "2026-10-04 08:40:51.150331+00",
      "observed_since": "2026-10-03",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a10612-b344-77ac-95a8-5479866e37ab"
    },
    {
      "id": "chg_01a0fa3f-d694-78af-aefb-4abee4794a0c",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-02",
      "occurred_at": "2026-10-02 01:34:42.759852+00",
      "observed_since": "2026-10-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0fa3f-d694-78af-aefb-4abee4794a0c"
    },
    {
      "id": "chg_01a0eb66-9e91-783d-a1c9-640da71a0948",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-29",
      "occurred_at": "2026-09-29 04:22:46.028954+00",
      "observed_since": "2026-09-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0eb66-9e91-783d-a1c9-640da71a0948"
    },
    {
      "id": "chg_01a0d116-1b3e-703c-9c47-b484c65618df",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-24",
      "occurred_at": "2026-09-24 01:44:41.959289+00",
      "observed_since": "2026-09-23",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0d116-1b3e-703c-9c47-b484c65618df"
    },
    {
      "id": "chg_01a0c762-c1d3-78a5-87f9-c51009742142",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-22",
      "occurred_at": "2026-09-22 04:32:13.075909+00",
      "observed_since": "2026-09-21",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0c762-c1d3-78a5-87f9-c51009742142"
    },
    {
      "id": "chg_01a0c191-2870-763c-a4b4-d6857fddf637",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 01:25:10.814155+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0c191-2870-763c-a4b4-d6857fddf637"
    },
    {
      "id": "chg_01a0b2c7-198e-7bf3-8d01-81e2c8319111",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 04:29:47.623616+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0b2c7-198e-7bf3-8d01-81e2c8319111"
    },
    {
      "id": "chg_01a0a840-3649-7ca1-8369-5dd53e3e9433",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 03:26:15.509459+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0a840-3649-7ca1-8369-5dd53e3e9433"
    },
    {
      "id": "chg_01a09e16-706e-791b-8cff-3a00d3cc1718",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 04:04:25.651692+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a09e16-706e-791b-8cff-3a00d3cc1718"
    },
    {
      "id": "chg_01a01cbc-3549-7037-9f95-82bc85b60f77",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 01:14:51.546706+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a01cbc-3549-7037-9f95-82bc85b60f77"
    },
    {
      "id": "chg_01a017a5-042c-7a4a-be35-05256aa1fec0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 01:31:25.566014+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a017a5-042c-7a4a-be35-05256aa1fec0"
    },
    {
      "id": "chg_01a0126f-a9a8-708d-8c8a-44cd0930d2da",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 01:15:02.77141+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a0126f-a9a8-708d-8c8a-44cd0930d2da"
    },
    {
      "id": "chg_01a002fb-41c1-7773-a06d-e214490b16e0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 01:13:35.88829+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_01a002fb-41c1-7773-a06d-e214490b16e0"
    },
    {
      "id": "chg_019ffde2-bc9c-719a-b626-68a7622e3f80",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 01:28:42.846028+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019ffde2-bc9c-719a-b626-68a7622e3f80"
    },
    {
      "id": "chg_019ff8ae-59bc-76ff-96ed-20b17d36581e",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 01:13:23.591074+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019ff8ae-59bc-76ff-96ed-20b17d36581e"
    },
    {
      "id": "chg_019ff3ad-fe0f-74a6-a05b-01993146368a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 01:54:54.065115+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019ff3ad-fe0f-74a6-a05b-01993146368a"
    },
    {
      "id": "chg_019fe93c-bfcf-7c3a-8cbd-1475e0260317",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 01:15:00.218196+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fe93c-bfcf-7c3a-8cbd-1475e0260317"
    },
    {
      "id": "chg_019fe422-90ba-77ae-a3fa-686e4c1de450",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 01:28:18.327856+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fe422-90ba-77ae-a3fa-686e4c1de450"
    },
    {
      "id": "chg_019fdef0-1e2b-7705-84fb-00bf26ea1350",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 01:15:06.121951+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fdef0-1e2b-7705-84fb-00bf26ea1350"
    },
    {
      "id": "chg_019fd4a2-ef4a-759b-940e-121f247ee685",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 01:14:35.690461+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fd4a2-ef4a-759b-940e-121f247ee685"
    },
    {
      "id": "chg_019fcf85-8e6b-77b2-84c3-24434c097de0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 01:24:24.261517+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fcf85-8e6b-77b2-84c3-24434c097de0"
    },
    {
      "id": "chg_019fcf85-8e6c-7988-b5b8-ee9e176fca6c",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "72",
        "assessed": "73",
        "resolved": "72",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 01:24:24.261517+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fcf85-8e6c-7988-b5b8-ee9e176fca6c"
    },
    {
      "id": "chg_019fcc53-2dec-76f5-a39b-f47ab29dedb5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:30:31.131607+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fcc53-2dec-76f5-a39b-f47ab29dedb5"
    },
    {
      "id": "chg_019fc6b8-7513-7674-911e-0cf377a35450",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:23:25.179628+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc6b8-7513-7674-911e-0cf377a35450"
    },
    {
      "id": "chg_019fc6b8-7514-7ec4-a55f-3825086d65ab",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:23:25.179628+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc6b8-7514-7ec4-a55f-3825086d65ab"
    },
    {
      "id": "chg_019fc6b8-7515-74bf-8d6c-b2f12878112b",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "setuptools.build_meta",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:23:25.179628+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc6b8-7515-74bf-8d6c-b2f12878112b"
    },
    {
      "id": "chg_019fc6b8-7516-7628-87d8-b4fa7956ddea",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:23:25.179628+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "The code this package runs automatically changed (its declared build backend)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc6b8-7516-7628-87d8-b4fa7956ddea"
    },
    {
      "id": "chg_019fc6b8-7517-75ac-885b-8e7fa48ad37f",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:23:25.179628+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc6b8-7517-75ac-885b-8e7fa48ad37f"
    },
    {
      "id": "chg_019fc1b3-ee8e-715a-b672-b26ef0e939b2",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 09:00:22.527939+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fc1b3-ee8e-715a-b672-b26ef0e939b2"
    },
    {
      "id": "chg_019fb1c7-c102-793e-b2b1-b4b4078c644f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 06:48:06.137931+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/moin105-karst/karst#chg-chg_019fb1c7-c102-793e-b2b1-b4b4078c644f"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 29,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 44,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-11-03",
      "total": 29,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-31",
      "total": 44,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-27",
      "total": 29,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 44,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-25",
      "total": 29,
      "delta": 29,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-10-24",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}