{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "qso-graph-qsp-mcp",
  "component": "qsp-mcp",
  "generated_at": "2026-09-21T02:18:58.844Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 18,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a070b8-f05c-7e9e-83ea-865389668e91",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 08:39:23.183054+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a070b8-f05c-7e9e-83ea-865389668e91"
    },
    {
      "id": "chg_01a06b15-a7bd-76ff-a0d8-88333f70218e",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 06:22:56.290701+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a06b15-a7bd-76ff-a0d8-88333f70218e"
    },
    {
      "id": "chg_01a06134-2b05-7987-81d0-891fd3bac864",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 08:20:03.4684+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a06134-2b05-7987-81d0-891fd3bac864"
    },
    {
      "id": "chg_01a05ba1-e4c8-7e5c-b25c-195e3078f334",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 06:22:11.629524+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a05ba1-e4c8-7e5c-b25c-195e3078f334"
    },
    {
      "id": "chg_01a056e7-1e9f-79c3-a975-0169f674582a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 08:19:42.092834+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a056e7-1e9f-79c3-a975-0169f674582a"
    },
    {
      "id": "chg_01a041e0-c611-7c00-b026-fecd94849797",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 06:20:44.814777+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a041e0-c611-7c00-b026-fecd94849797"
    },
    {
      "id": "chg_01a03795-2bee-75f9-b608-1911ae0d70f0",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 06:21:57.994181+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a03795-2bee-75f9-b608-1911ae0d70f0"
    },
    {
      "id": "chg_01a032da-37c5-748a-a980-be996cf01f06",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 08:19:16.927046+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_01a032da-37c5-748a-a980-be996cf01f06"
    },
    {
      "id": "chg_019ff98e-1705-70f0-9053-fda1d1edc40e",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 05:17:46.461717+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019ff98e-1705-70f0-9053-fda1d1edc40e"
    },
    {
      "id": "chg_019ff476-a04f-706c-a6bd-5972b82b2d76",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 05:34:02.806874+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019ff476-a04f-706c-a6bd-5972b82b2d76"
    },
    {
      "id": "chg_019fd582-e1f8-7a9c-9bd7-175046ecd737",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 05:19:12.315777+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fd582-e1f8-7a9c-9bd7-175046ecd737"
    },
    {
      "id": "chg_019fc4dc-4f47-76a8-be05-9144281b5969",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:43:20.37716+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc4dc-4f47-76a8-be05-9144281b5969"
    },
    {
      "id": "chg_019fc4dc-4f48-7882-b95c-cfec8bb33afd",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "32",
        "assessed": "33",
        "resolved": "32",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:43:20.37716+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc4dc-4f48-7882-b95c-cfec8bb33afd"
    },
    {
      "id": "chg_019fc4dc-4f48-7f0b-8510-e13a264f7193",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:43:20.37716+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc4dc-4f48-7f0b-8510-e13a264f7193"
    },
    {
      "id": "chg_019fc4dc-4f49-734a-9fb1-5fe34d50d658",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:43:20.37716+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc4dc-4f49-734a-9fb1-5fe34d50d658"
    },
    {
      "id": "chg_019fc2d3-2684-7cda-9559-0cba5f2b7649",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 14:14:05.51785+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc2d3-2684-7cda-9559-0cba5f2b7649"
    },
    {
      "id": "chg_019fc2d3-268a-723b-aa82-6f853a792bd1",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 14:14:05.51785+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fc2d3-268a-723b-aa82-6f853a792bd1"
    },
    {
      "id": "chg_019fbd5c-dbeb-756e-bc43-3e447d665a5f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 12:46:47.244847+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/qso-graph-qsp-mcp/qsp-mcp#chg-chg_019fbd5c-dbeb-756e-bc43-3e447d665a5f"
    }
  ],
  "days": [
    {
      "date": "2026-09-15",
      "total": 24,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 24,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-12",
      "total": 24,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 24,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-05",
      "total": 24,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-04",
      "total": 39,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-02",
      "total": 24,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-01",
      "total": 39,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}