{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "nikolai-vysotskyi-trace-mcp",
  "component": "trace-mcp",
  "generated_at": "2026-09-21T06:09:15.880Z",
  "tracking_since": "2026-08-29",
  "counts": {
    "critical": 0,
    "security": 37,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0c292-2c58-7f12-83df-10171e04811d",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 06:05:54.427525+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0c292-2c58-7f12-83df-10171e04811d"
    },
    {
      "id": "chg_01a0c292-2c5e-7612-b8ec-03471c79ead4",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.67",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 06:05:54.427525+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Stability (0.67 → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0c292-2c5e-7612-b8ec-03471c79ead4"
    },
    {
      "id": "chg_01a0c0d5-72d6-73c7-9782-fff6e214e7c1",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 22:00:08.660517+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0c0d5-72d6-73c7-9782-fff6e214e7c1"
    },
    {
      "id": "chg_01a0bfc3-10b5-75af-8d1c-81240dc5427c",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 17:00:26.591286+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0bfc3-10b5-75af-8d1c-81240dc5427c"
    },
    {
      "id": "chg_01a0bfc3-10b7-72ae-ab25-10ea6872e7c9",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.63",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 17:00:26.591286+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Stability (0.63 → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0bfc3-10b7-72ae-ab25-10ea6872e7c9"
    },
    {
      "id": "chg_01a0bbaf-7618-729a-9c59-d4c477c91de5",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 22:00:33.527728+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0bbaf-7618-729a-9c59-d4c477c91de5"
    },
    {
      "id": "chg_01a0bbaf-7619-761e-afad-8d89f61ba9d1",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.60",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 22:00:33.527728+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Stability (0.60 → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0bbaf-7619-761e-afad-8d89f61ba9d1"
    },
    {
      "id": "chg_01a0b3c6-9052-7a0b-8b25-71419e1ab8e6",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-rgj7-g3m4-5g8c",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-rgj7-g3m4-5g8c"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 09:08:49.25888+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "GHSA-rgj7-g3m4-5g8c no longer affects this package",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0b3c6-9052-7a0b-8b25-71419e1ab8e6"
    },
    {
      "id": "chg_01a0b3c6-905c-7aaf-81c3-07677a92a845",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "288",
        "assessed": "289",
        "resolved": "288",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 09:08:49.25888+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0b3c6-905c-7aaf-81c3-07677a92a845"
    },
    {
      "id": "chg_01a0b3c6-9062-7194-b6d7-beef23ce4f7d",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-f88m-g3jw-g9cj",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-f88m-g3jw-g9cj"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 09:08:49.25888+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "GHSA-f88m-g3jw-g9cj no longer affects this package",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0b3c6-9062-7194-b6d7-beef23ce4f7d"
    },
    {
      "id": "chg_01a0b3c6-9065-7d69-a788-e3b39e62c1ee",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-39244",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-39244"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 09:08:49.25888+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "CVE-2026-39244 no longer affects this package",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0b3c6-9065-7d69-a788-e3b39e62c1ee"
    },
    {
      "id": "chg_01a08fb9-8485-71e6-97d4-a679638685fa",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 09:08:14.594367+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a08fb9-8485-71e6-97d4-a679638685fa"
    },
    {
      "id": "chg_01a08d2f-ab89-7594-b01c-4b94bc8956f0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 21:18:26.384803+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a08d2f-ab89-7594-b01c-4b94bc8956f0"
    },
    {
      "id": "chg_01a0856c-46b8-7af8-8493-74450d803dde",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-rgj7-g3m4-5g8c",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-rgj7-g3m4-5g8c",
        "severity": "high"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 09:07:40.779447+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "GHSA-rgj7-g3m4-5g8c affects this package (high)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0856c-46b8-7af8-8493-74450d803dde"
    },
    {
      "id": "chg_01a08045-ec8a-716a-86a1-243de97f814d",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@huggingface/transformers > onnxruntime-node > adm-zip",
        "refs": "[\"CVE-2026-39244\",\"GHSA-f88m-g3jw-g9cj\"]",
        "seen": "293",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "294",
        "resolved": "293",
        "severity": "high",
        "transitive": "2",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":3,\"path\":[\"@huggingface/transformers\",\"onnxruntime-node\",\"adm-zip\"],\"refs\":[\"CVE-2026-39244\"]},{\"name\":\"sharp\",\"version\":\"0.34.5\",\"depth\":2,\"path\":[\"@huggingface/transformers\",\"sharp\"],\"refs\":[\"GHSA-f88m-g3jw-g9cj\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 09:07:41.015585+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a08045-ec8a-716a-86a1-243de97f814d"
    },
    {
      "id": "chg_01a07cd0-4b2d-768f-b603-937753135a5e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 17:00:20.175493+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a07cd0-4b2d-768f-b603-937753135a5e"
    },
    {
      "id": "chg_01a07c99-a2f4-77bd-9d92-8a16436c2a62",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.20",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 16:00:37.989489+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Stability (0.20 → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a07c99-a2f4-77bd-9d92-8a16436c2a62"
    },
    {
      "id": "chg_01a07c99-a2fa-71b2-b8e1-054ce22d86ad",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 16:00:37.989489+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a07c99-a2fa-71b2-b8e1-054ce22d86ad"
    },
    {
      "id": "chg_01a07b1f-269d-717a-8fe6-2ef0e6468574",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 09:07:13.978374+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a07b1f-269d-717a-8fe6-2ef0e6468574"
    },
    {
      "id": "chg_01a0776a-f6a2-7dde-a81b-eea403cd938c",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 15:51:33.766409+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0776a-f6a2-7dde-a81b-eea403cd938c"
    },
    {
      "id": "chg_01a075f8-a910-7c88-aa1e-585c0d9e52e5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 09:07:05.531661+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a075f8-a910-7c88-aa1e-585c0d9e52e5"
    },
    {
      "id": "chg_01a0727d-d586-7093-a0f2-39104585fe46",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 16:54:04.049087+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0727d-d586-7093-a0f2-39104585fe46"
    },
    {
      "id": "chg_01a06bab-6d2d-7d6a-9f37-70e6f144b4e8",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 09:06:31.707225+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a06bab-6d2d-7d6a-9f37-70e6f144b4e8"
    },
    {
      "id": "chg_01a06684-e4a4-7284-b833-fe91b797d556",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@huggingface/transformers > onnxruntime-node > adm-zip",
        "refs": "[\"CVE-2026-39244\",\"GHSA-f88m-g3jw-g9cj\"]",
        "seen": "293",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "294",
        "resolved": "293",
        "severity": "high",
        "transitive": "2",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":3,\"path\":[\"@huggingface/transformers\",\"onnxruntime-node\",\"adm-zip\"],\"refs\":[\"CVE-2026-39244\"]},{\"name\":\"sharp\",\"version\":\"0.34.5\",\"depth\":2,\"path\":[\"@huggingface/transformers\",\"sharp\"],\"refs\":[\"GHSA-f88m-g3jw-g9cj\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 09:06:20.382899+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a06684-e4a4-7284-b833-fe91b797d556"
    },
    {
      "id": "chg_01a06684-e4a4-7879-bb14-f60c3474efb9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 09:06:20.382899+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a06684-e4a4-7879-bb14-f60c3474efb9"
    },
    {
      "id": "chg_01a062e7-87c9-778e-90e0-80d56c4b8b2e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 16:15:35.542669+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a062e7-87c9-778e-90e0-80d56c4b8b2e"
    },
    {
      "id": "chg_01a0620a-b90f-79da-868a-7c6d3ec8813c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 12:14:24.759982+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0620a-b90f-79da-868a-7c6d3ec8813c"
    },
    {
      "id": "chg_01a05e8e-ee29-7cfd-9726-c81efe44ae1d",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 20:00:20.50254+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a05e8e-ee29-7cfd-9726-c81efe44ae1d"
    },
    {
      "id": "chg_01a05e8e-ee2b-789e-bff5-d472a8f97a33",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.insufficient_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 20:00:20.50254+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a05e8e-ee2b-789e-bff5-d472a8f97a33"
    },
    {
      "id": "chg_01a0588e-ed66-7c00-bad2-61434cf5b005",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:02:36.618403+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0588e-ed66-7c00-bad2-61434cf5b005"
    },
    {
      "id": "chg_01a0588e-ed67-75ac-9ec7-c8bd22ffb96d",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:02:36.618403+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0588e-ed67-75ac-9ec7-c8bd22ffb96d"
    },
    {
      "id": "chg_01a0588e-ed67-7b33-9769-b8215d49f595",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "30",
        "judged": "30"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:02:36.618403+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0588e-ed67-7b33-9769-b8215d49f595"
    },
    {
      "id": "chg_01a0588c-f04b-764f-9dd7-03f883294495",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:00:26.233056+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0588c-f04b-764f-9dd7-03f883294495"
    },
    {
      "id": "chg_01a0588c-f04c-7966-aa9f-697045fa5315",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:00:26.233056+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0588c-f04c-7966-aa9f-697045fa5315"
    },
    {
      "id": "chg_01a0509e-b98d-7d5c-bc77-a60c4522a555",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-f88m-g3jw-g9cj",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-f88m-g3jw-g9cj",
        "severity": "high"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 03:02:54.496955+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "GHSA-f88m-g3jw-g9cj affects this package (high)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0509e-b98d-7d5c-bc77-a60c4522a555"
    },
    {
      "id": "chg_01a0509e-b98e-7aa2-b32d-2e6c14429849",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-39244",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-39244",
        "severity": "high"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 03:02:54.496955+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "CVE-2026-39244 affects this package (high)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0509e-b98e-7aa2-b32d-2e6c14429849"
    },
    {
      "id": "chg_01a0509e-b990-7061-ab09-49d3d611ffac",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@huggingface/transformers > onnxruntime-node > adm-zip",
        "refs": "[\"CVE-2026-39244\",\"GHSA-f88m-g3jw-g9cj\"]",
        "seen": "324",
        "package": "adm-zip",
        "version": "0.5.18",
        "assessed": "325",
        "resolved": "324",
        "severity": "high",
        "transitive": "2",
        "vulnerable": "[{\"name\":\"adm-zip\",\"version\":\"0.5.18\",\"depth\":3,\"path\":[\"@huggingface/transformers\",\"onnxruntime-node\",\"adm-zip\"],\"refs\":[\"CVE-2026-39244\"]},{\"name\":\"sharp\",\"version\":\"0.34.5\",\"depth\":2,\"path\":[\"@huggingface/transformers\",\"sharp\"],\"refs\":[\"GHSA-f88m-g3jw-g9cj\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 03:02:54.496955+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/nikolai-vysotskyi-trace-mcp/trace-mcp#chg-chg_01a0509e-b990-7061-ab09-49d3d611ffac"
    }
  ],
  "days": [
    {
      "date": "2026-09-21",
      "total": 48,
      "delta": -40,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-20",
      "total": 88,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 10
    },
    {
      "date": "2026-09-19",
      "total": 88,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-18",
      "total": 87,
      "delta": 3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-09-16",
      "total": 84,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 50,
        "to": 53,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 15,
          "to_days": 16
        },
        "partial": false,
        "compared_to": "2026-09-15",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-14",
      "total": 83,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 43,
        "to": 47,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 13,
          "to_days": 14
        },
        "partial": false,
        "compared_to": "2026-09-13",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-12",
      "total": 82,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 37,
        "to": 40,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 11,
          "to_days": 12
        },
        "partial": false,
        "compared_to": "2026-09-11",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-11",
      "total": 81,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}