{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "thaitrevor-gold-mcp",
  "component": "gold-mcp",
  "generated_at": "2026-09-21T02:48:05.302Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 5,
    "security": 27,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0ad9c-5d87-729a-9534-9fd968318748",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 04:25:00.848913+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a0ad9c-5d87-729a-9534-9fd968318748"
    },
    {
      "id": "chg_01a0a361-119d-7b81-96b6-140b3d4c10cf",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 04:44:02.670072+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a0a361-119d-7b81-96b6-140b3d4c10cf"
    },
    {
      "id": "chg_01a09ecb-08e0-7b64-8d4c-99243005723e",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 07:21:41.076414+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a09ecb-08e0-7b64-8d4c-99243005723e"
    },
    {
      "id": "chg_01a0898b-e8e4-7873-9c57-afa3292db222",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 04:20:42.72068+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a0898b-e8e4-7873-9c57-afa3292db222"
    },
    {
      "id": "chg_01a0658b-46e8-7e99-a865-07419d6ccbe3",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 04:33:41.504526+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a0658b-46e8-7e99-a865-07419d6ccbe3"
    },
    {
      "id": "chg_01a01d6f-5a9a-74f3-b7cf-f4977aba4c92",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 04:30:31.98735+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a01d6f-5a9a-74f3-b7cf-f4977aba4c92"
    },
    {
      "id": "chg_01a0183a-9cf2-75ec-a103-ebf496acafc6",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 04:14:49.495319+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a0183a-9cf2-75ec-a103-ebf496acafc6"
    },
    {
      "id": "chg_01a01329-26cb-7a79-a632-24d0b3e5ca80",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-18",
      "occurred_at": "2026-08-18 04:37:39.057776+00",
      "observed_since": "2026-08-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a01329-26cb-7a79-a632-24d0b3e5ca80"
    },
    {
      "id": "chg_01a00ded-6d16-7a25-bd83-1ca9aa28f91d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 04:14:18.740406+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a00ded-6d16-7a25-bd83-1ca9aa28f91d"
    },
    {
      "id": "chg_01a008dc-26a8-78c4-9674-a3aca7f07b27",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 04:37:20.492907+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_01a008dc-26a8-78c4-9674-a3aca7f07b27"
    },
    {
      "id": "chg_019ffe8e-4467-7bed-a17e-8a67c605ef3f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 04:36:04.22272+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019ffe8e-4467-7bed-a17e-8a67c605ef3f"
    },
    {
      "id": "chg_019fe9ef-82c9-7dc4-b84a-83eff48a06e6",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 04:30:15.688313+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fe9ef-82c9-7dc4-b84a-83eff48a06e6"
    },
    {
      "id": "chg_019fe4b9-aa3d-7e5a-9d10-9e30403243ee",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 04:13:20.770067+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fe4b9-aa3d-7e5a-9d10-9e30403243ee"
    },
    {
      "id": "chg_019fdf95-9948-7d3f-96b3-19027b2c6955",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 04:15:51.026033+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fdf95-9948-7d3f-96b3-19027b2c6955"
    },
    {
      "id": "chg_019fd01f-fd72-7a7f-8ced-7c9310ad8d6d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 04:13:05.21147+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fd01f-fd72-7a7f-8ced-7c9310ad8d6d"
    },
    {
      "id": "chg_019fd01f-fd73-7824-9f16-778228e8f9f0",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 04:13:05.21147+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fd01f-fd73-7824-9f16-778228e8f9f0"
    },
    {
      "id": "chg_019fcb22-11e9-7155-82c4-a2e93015eb85",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.unpatched_critical",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "cryptography",
        "refs": "[\"CVE-2026-39892\"]",
        "seen": "53",
        "direct": "1",
        "package": "cryptography",
        "version": "45.0.7",
        "assessed": "54",
        "resolved": "53",
        "severity": "high",
        "vulnerable": "[{\"name\":\"cryptography\",\"version\":\"45.0.7\",\"depth\":1,\"path\":[\"cryptography\"],\"refs\":[\"GHSA-537c-gmf6-5ccf\",\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\",\"CVE-2026-34073\",\"CVE-2026-39892\",\"CVE-2026-26007\",\"CVE-2026-26007\",\"CVE-2026-34073\",\"CVE-2026-39892\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 04:57:15.473207+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fcb22-11e9-7155-82c4-a2e93015eb85"
    },
    {
      "id": "chg_019fcb22-11ec-7c6d-ae5b-0adaf6d8d1a8",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 04:57:15.473207+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fcb22-11ec-7c6d-ae5b-0adaf6d8d1a8"
    },
    {
      "id": "chg_019fc6de-e9d6-73a5-8737-7f1798280d31",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:05:25.444492+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc6de-e9d6-73a5-8737-7f1798280d31"
    },
    {
      "id": "chg_019fc6de-e9d7-7b11-9fe1-f0892feabb32",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:05:25.444492+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc6de-e9d7-7b11-9fe1-f0892feabb32"
    },
    {
      "id": "chg_019fc6de-e9d8-7071-a114-428dc1cb6beb",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:05:25.444492+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc6de-e9d8-7071-a114-428dc1cb6beb"
    },
    {
      "id": "chg_019fc6de-e9d8-7534-9584-b5fb75b192a4",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:05:25.444492+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc6de-e9d8-7534-9584-b5fb75b192a4"
    },
    {
      "id": "chg_019fc6de-e9d8-79ac-89d9-aeb6189582a2",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:05:25.444492+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc6de-e9d8-79ac-89d9-aeb6189582a2"
    },
    {
      "id": "chg_019fc2c0-2c65-765e-bcc7-ebc2b8e99cd7",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 13:53:21.997181+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc2c0-2c65-765e-bcc7-ebc2b8e99cd7"
    },
    {
      "id": "chg_019fc2c0-2c67-705b-af05-f87397470cd7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 13:53:21.997181+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fc2c0-2c67-705b-af05-f87397470cd7"
    },
    {
      "id": "chg_019fb6d1-5ba3-798e-a9a1-0999e89b3ec4",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.unpatched_critical",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "cryptography",
        "refs": "[\"CVE-2026-39892\"]",
        "seen": "57",
        "direct": "1",
        "package": "cryptography",
        "version": "45.0.7",
        "assessed": "58",
        "resolved": "57",
        "severity": "high",
        "vulnerable": "[{\"name\":\"cryptography\",\"version\":\"45.0.7\",\"depth\":1,\"path\":[\"cryptography\"],\"refs\":[\"GHSA-537c-gmf6-5ccf\",\"CVE-2026-34073\",\"CVE-2026-39892\",\"CVE-2026-26007\",\"CVE-2026-26007\",\"CVE-2026-34073\",\"CVE-2026-39892\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba3-798e-a9a1-0999e89b3ec4"
    },
    {
      "id": "chg_019fb6d1-5ba4-7234-83ea-f471fb36b00c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-39892",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-39892",
        "severity": "high"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "CVE-2026-39892 affects this package (high)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba4-7234-83ea-f471fb36b00c"
    },
    {
      "id": "chg_019fb6d1-5ba4-7e77-8dfb-baafcdac8f4f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba4-7e77-8dfb-baafcdac8f4f"
    },
    {
      "id": "chg_019fb6d1-5ba5-7439-89d2-b7b5d620ba95",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba5-7439-89d2-b7b5d620ba95"
    },
    {
      "id": "chg_019fb6d1-5ba5-78d3-80a5-c59055764931",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba5-78d3-80a5-c59055764931"
    },
    {
      "id": "chg_019fb6d1-5ba5-7da4-ab72-e510e70033f9",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba5-7da4-ab72-e510e70033f9"
    },
    {
      "id": "chg_019fb6d1-5ba8-71ee-a2c1-eb41f69e9532",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 06:16:41.617231+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/thaitrevor-gold-mcp/gold-mcp#chg-chg_019fb6d1-5ba8-71ee-a2c1-eb41f69e9532"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-19",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-10",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}