{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "suneel190700-mendrift-mcp",
  "component": "mendrift-mcp",
  "generated_at": "2026-09-23T22:48:38.921Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 21,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0a49a-4aa9-7e3a-b797-c70a76a9c4a2",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 10:26:10.046615+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a0a49a-4aa9-7e3a-b797-c70a76a9c4a2"
    },
    {
      "id": "chg_01a09fe5-f00b-797d-bd05-4bb6bbb82a49",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 12:30:41.145617+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a09fe5-f00b-797d-bd05-4bb6bbb82a49"
    },
    {
      "id": "chg_01a06bc8-13e1-7d6e-8399-533375b98f45",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-81726",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.no_fix_available",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-81726",
        "severity": ""
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 09:37:49.396388+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "CVE-2026-81726 affects this package",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a06bc8-13e1-7d6e-8399-533375b98f45"
    },
    {
      "id": "chg_01a06bc8-13e3-7389-8f16-c263b89d5286",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.no_fix_available",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "refs": "[\"CVE-2026-81726\"]",
        "seen": "182",
        "package": "nltk",
        "assessed": "183",
        "resolved": "182",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"nltk\",\"version\":\"3.10.3\",\"depth\":2,\"path\":[\"evidently\",\"nltk\"],\"refs\":[\"CVE-2026-81726\"]}]",
        "no_fix_refs": "[\"CVE-2026-81726\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 09:37:49.396388+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a06bc8-13e3-7389-8f16-c263b89d5286"
    },
    {
      "id": "chg_01a06bc8-13e3-7962-8d08-215344254bfb",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69247",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.no_fix_available",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69247"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 09:37:49.396388+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "CVE-2026-69247 no longer affects this package",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a06bc8-13e3-7962-8d08-215344254bfb"
    },
    {
      "id": "chg_01a01e77-491c-7c25-ab53-91b869d6f0e9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 09:18:49.01799+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a01e77-491c-7c25-ab53-91b869d6f0e9"
    },
    {
      "id": "chg_01a00f04-820f-7033-9a3b-f5a7f3da0aa0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 09:19:08.665732+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a00f04-820f-7033-9a3b-f5a7f3da0aa0"
    },
    {
      "id": "chg_01a009e9-a581-7520-a358-6e188e0e7ba5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 09:31:42.105592+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a009e9-a581-7520-a358-6e188e0e7ba5"
    },
    {
      "id": "chg_01a004b7-8cbd-789e-810d-bed4a21a863c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 09:18:53.089354+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_01a004b7-8cbd-789e-810d-bed4a21a863c"
    },
    {
      "id": "chg_019fff9b-1c90-77c0-83c3-c1cf3ddbad86",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 09:29:43.1475+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fff9b-1c90-77c0-83c3-c1cf3ddbad86"
    },
    {
      "id": "chg_019fd136-d8f8-7f3b-b85f-a4b326da650d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 09:17:40.454701+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fd136-d8f8-7f3b-b85f-a4b326da650d"
    },
    {
      "id": "chg_019fcc49-e781-7571-9505-f3dc1f9e6644",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69247",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69247",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:20:23.279282+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69247 affects this package (high)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fcc49-e781-7571-9505-f3dc1f9e6644"
    },
    {
      "id": "chg_019fcc49-e782-7e44-bce4-3457ccd70671",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "mlflow > cryptography",
        "refs": "[\"CVE-2026-69247\"]",
        "seen": "180",
        "package": "cryptography",
        "version": "49.0.0",
        "assessed": "181",
        "resolved": "180",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"cryptography\",\"version\":\"49.0.0\",\"depth\":2,\"path\":[\"mlflow\",\"cryptography\"],\"refs\":[\"CVE-2026-69247\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:20:23.279282+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fcc49-e782-7e44-bce4-3457ccd70671"
    },
    {
      "id": "chg_019fcc49-e783-7613-bd72-1c123b60233d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:20:23.279282+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fcc49-e783-7613-bd72-1c123b60233d"
    },
    {
      "id": "chg_019fc71a-4f90-7855-a371-4cc99b8a5715",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 10:10:18.111204+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc71a-4f90-7855-a371-4cc99b8a5715"
    },
    {
      "id": "chg_019fc71a-4f91-772f-87b8-3237fe587231",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 10:10:18.111204+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc71a-4f91-772f-87b8-3237fe587231"
    },
    {
      "id": "chg_019fc71a-4f91-7be8-914c-b1e10ba33e89",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 10:10:18.111204+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc71a-4f91-7be8-914c-b1e10ba33e89"
    },
    {
      "id": "chg_019fc71a-4f92-7185-93fc-bf2563f7e91f",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 10:10:18.111204+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc71a-4f92-7185-93fc-bf2563f7e91f"
    },
    {
      "id": "chg_019fc71a-4f92-76ce-80fe-f4e7c689adf9",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 10:10:18.111204+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc71a-4f92-76ce-80fe-f4e7c689adf9"
    },
    {
      "id": "chg_019fc3ab-9d28-7914-8d73-e32eb135fb35",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 18:10:31.828486+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fc3ab-9d28-7914-8d73-e32eb135fb35"
    },
    {
      "id": "chg_019fb1d9-78d7-7641-a69a-b763e7e5fa5f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 07:07:27.310048+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/suneel190700-mendrift-mcp/mendrift-mcp#chg-chg_019fb1d9-78d7-7641-a69a-b763e7e5fa5f"
    }
  ],
  "days": [
    {
      "date": "2026-09-17",
      "total": 36,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 36,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 36,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 21,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-08",
      "total": 36,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-07",
      "total": 36,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-04",
      "total": 36,
      "delta": 2,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-09-02",
      "total": 34,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}