{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T18:23:42.940Z","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","markdownUrl":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m.md","server":{"slug":"theluckystrike-pomodoro","name":"io.github.theluckystrike/pomodoro","registryName":"io.github.theluckystrike/pomodoro","description":"Plan a workday into pomodoros, log focus sessions, get daily stats. All data is local.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","type":"mcpb","identifier":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/pomodoro.mcpb","withdrawn":false,"url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","version":"1.0.1","transport":"stdio","scoredAt":"2026-11-05T04:38:14.320Z"},"score":{"total":59,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":59},{"date":"2026-11-04","total":59},{"date":"2026-11-03","total":59},{"date":"2026-11-02","total":58},{"date":"2026-11-01","total":59},{"date":"2026-10-31","total":59},{"date":"2026-10-30","total":59},{"date":"2026-10-29","total":59},{"date":"2026-10-28","total":59},{"date":"2026-10-27","total":59},{"date":"2026-10-26","total":58},{"date":"2026-10-25","total":58},{"date":"2026-10-24","total":57},{"date":"2026-10-23","total":57},{"date":"2026-10-22","total":56},{"date":"2026-10-21","total":56},{"date":"2026-10-20","total":56},{"date":"2026-10-19","total":55},{"date":"2026-10-18","total":55},{"date":"2026-10-17","total":54},{"date":"2026-10-16","total":54},{"date":"2026-10-15","total":53},{"date":"2026-10-14","total":16},{"date":"2026-10-13","total":16},{"date":"2026-10-12","total":16},{"date":"2026-10-10","total":16},{"date":"2026-10-07","total":49},{"date":"2026-10-04","total":45},{"date":"2026-10-03","total":45},{"date":"2026-10-02","total":45}]},"categories":[{"name":"Supply Chain Security","score":23,"verdict":"partial","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs were checked across the 88 of 88 dependencies we could resolve, so this covers what we could see, not the whole tree.","No install/post-install scripts declared.","31 of 88 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.tree_partial","args":{"seen":"88","resolved":"88"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"88","unhealthy":"31"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 48 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"48"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":69,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 66 tokens (~66/item across 1 items; 1 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"66","items":"1","tools":"1","tokens":"66","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 1 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"1","judged":"1"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package."],"malware":[],"components":[{"slug":"https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","type":"mcpb","identifier":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/pomodoro.mcpb","withdrawn":false,"score":59,"current":true,"url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","markdownUrl":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m.md"}],"facts":[{"label":"Registry","value":"mcpb"},{"label":"Package","value":"https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/pomodoro.mcpb"},{"label":"Version","value":"1.0.1"},{"label":"Transport","value":"stdio"},{"label":"SHA-256","value":"3302f12fcc86ec99d6d4a73a44bc65625269db44b736ee038d5a3e9168c0cc6a"}],"install":{"available":true,"bundleSha256":"3302f12fcc86ec99d6d4a73a44bc65625269db44b736ee038d5a3e9168c0cc6a"},"tools":[{"name":"pomodoro_plan","title":null,"description":"Plan a work session into pomodoros: 25-min focus blocks with 5-min short breaks and a 15-min long break every 4th block.","inputs":[{"name":"blocks","type":"number","required":false,"description":"Alternative: number of pomodoros"},{"name":"minutes","type":"number","required":false,"description":"Total minutes available"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":66}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T04:38:14.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":88,"partial":false,"deprecated":null,"stale":31,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-09-27","recent":[{"id":"chg_01a19f99-2a30-76ed-978f-ea81b9af48d0","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a19f99-2a30-76ed-978f-ea81b9af48d0"},{"id":"chg_01a19f99-2a32-704a-bf6f-6ea8b6aab670","kind":"score.total_changed","summary":"Trust score (58 → 59)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a19f99-2a32-704a-bf6f-6ea8b6aab670"},{"id":"chg_01a19a6f-c77e-7bc4-8fc6-5dd6212f2885","kind":"check.verdict","summary":"Stability (pass → 0.97)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a19a6f-c77e-7bc4-8fc6-5dd6212f2885"},{"id":"chg_01a19a6f-c782-70d9-9181-aeefe811d1b9","kind":"score.total_changed","summary":"Trust score (59 → 58)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a19a6f-c782-70d9-9181-aeefe811d1b9"},{"id":"chg_01a17b8d-34a5-761a-9351-6d0d174be8ab","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a17b8d-34a5-761a-9351-6d0d174be8ab"},{"id":"chg_01a17b8d-34a7-78c1-8534-507c8ad279ca","kind":"score.total_changed","summary":"Trust score (58 → 59)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a17b8d-34a7-78c1-8534-507c8ad279ca"},{"id":"chg_01a1714a-3764-71db-80b1-2174da4d852b","kind":"score.total_changed","summary":"Trust score (57 → 58)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a1714a-3764-71db-80b1-2174da4d852b"},{"id":"chg_01a166fd-897e-7ebf-b41b-3e96c11a5705","kind":"score.total_changed","summary":"Trust score (56 → 57)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a166fd-897e-7ebf-b41b-3e96c11a5705"},{"id":"chg_01a15789-0cdd-7101-a1b0-72d403f178e9","kind":"score.total_changed","summary":"Trust score (55 → 56)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a15789-0cdd-7101-a1b0-72d403f178e9"},{"id":"chg_01a14d3b-32fa-783f-9ebc-2c91d6bb1d68","kind":"score.total_changed","summary":"Trust score (54 → 55)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a14d3b-32fa-783f-9ebc-2c91d6bb1d68"},{"id":"chg_01a142f3-e7ae-760c-967e-f3d42813aca3","kind":"score.total_changed","summary":"Trust score (53 → 54)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a142f3-e7ae-760c-967e-f3d42813aca3"},{"id":"chg_01a13dc9-3009-7b44-a40c-d3388aa44af3","kind":"check.reverified","summary":"Injection markers (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-3009-7b44-a40c-d3388aa44af3"},{"id":"chg_01a13dc9-300c-706a-a886-deba20fe7a60","kind":"check.reverified","summary":"MCP protocol (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-300c-706a-a886-deba20fe7a60"},{"id":"chg_01a13dc9-300c-794f-a512-bec3e82865f6","kind":"check.reverified","summary":"Tool coverage (unverified → 100)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-300c-794f-a512-bec3e82865f6"},{"id":"chg_01a13dc9-300d-77a4-bf9d-c38071de5e11","kind":"check.reverified","summary":"Stability (unverified → 0.60)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-300d-77a4-bf9d-c38071de5e11"},{"id":"chg_01a13dc9-300d-7f3d-84d6-cc9e36c3820a","kind":"package.version_changed","summary":"Package version (0.22.0 → 1.0.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-300d-7f3d-84d6-cc9e36c3820a"},{"id":"chg_01a13dc9-300e-7a6d-9b57-6ba6def54f7c","kind":"score.total_changed","summary":"Trust score (16 → 53)","materiality":"functional","direction":"improvement","scoreDelta":37,"occurredOn":"2026-10-15","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a13dc9-300e-7a6d-9b57-6ba6def54f7c"},{"id":"chg_01a138a3-da23-73a5-822e-bbee925e80bb","kind":"package.version_changed","summary":"Package version (0.22.0 → 1.0.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a138a3-da23-73a5-822e-bbee925e80bb"},{"id":"chg_01a1264a-6eb1-7398-bec1-3d09c00fbafb","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a1264a-6eb1-7398-bec1-3d09c00fbafb"},{"id":"chg_01a1264a-6eb1-7e4a-9d60-c5f2f7f93e3b","kind":"check.unverifiable","summary":"Stability (0.33 → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m#chg-chg_01a1264a-6eb1-7e4a-9d60-c5f2f7f93e3b"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m/changelog.json"},"links":{"html":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m","markdown":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m.md","changelogJson":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m/changelog.json","changelogRss":"https://verifymcp.io/servers/theluckystrike-pomodoro/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-pomodoro-m.xml","external":[{"label":"Repository","href":"https://github.com/theluckystrike/mcp-servers"}]}}