{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "tonywang-hub-mcp-cn-commerce",
  "component": "mcp-cn-commerce",
  "generated_at": "2026-10-18T10:47:40.369Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 23,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a14dc1-a6bc-7c7a-a65c-078f25b22fd3",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 06:44:58.398293+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a14dc1-a6bc-7c7a-a65c-078f25b22fd3"
    },
    {
      "id": "chg_01a13c76-d6d5-76f9-bb24-e85c0a3e5377",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 22:09:43.459234+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a13c76-d6d5-76f9-bb24-e85c0a3e5377"
    },
    {
      "id": "chg_01a13c76-d6d7-75af-82c4-d9ec5fb5abd4",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "23",
        "judged": "23"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 22:09:43.459234+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a13c76-d6d7-75af-82c4-d9ec5fb5abd4"
    },
    {
      "id": "chg_01a13c76-d6d7-7cad-bf68-dfdd39afa49a",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 22:09:43.459234+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a13c76-d6d7-7cad-bf68-dfdd39afa49a"
    },
    {
      "id": "chg_01a13429-9e75-799c-ac0e-975b5132ac84",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 07:28:25.181985+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a13429-9e75-799c-ac0e-975b5132ac84"
    },
    {
      "id": "chg_01a12f98-e478-7a5d-b1bd-d52addec9620",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 10:11:51.248487+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a12f98-e478-7a5d-b1bd-d52addec9620"
    },
    {
      "id": "chg_01a12f98-e47a-7257-9483-2d241f1e97f6",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 10:11:51.248487+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a12f98-e47a-7257-9483-2d241f1e97f6"
    },
    {
      "id": "chg_01a12f98-e47a-797d-9d8c-12d66e84d039",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 10:11:51.248487+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a12f98-e47a-797d-9d8c-12d66e84d039"
    },
    {
      "id": "chg_01a0d202-8cd7-7973-9f5b-1c1f7cc3fa4a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-24",
      "occurred_at": "2026-09-24 06:02:57.343067+00",
      "observed_since": "2026-09-23",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a0d202-8cd7-7973-9f5b-1c1f7cc3fa4a"
    },
    {
      "id": "chg_01a0c2d6-b5df-75cf-983a-33d78de6e2bc",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 07:20:45.968159+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a0c2d6-b5df-75cf-983a-33d78de6e2bc"
    },
    {
      "id": "chg_01a0b852-8704-721c-ba1b-b2e11dbb1d2d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 06:20:11.261167+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a0b852-8704-721c-ba1b-b2e11dbb1d2d"
    },
    {
      "id": "chg_01a0b362-92f6-7c52-9eb5-1dd31fd32f9f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 07:19:36.655418+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a0b362-92f6-7c52-9eb5-1dd31fd32f9f"
    },
    {
      "id": "chg_01a0a3ef-ca1d-71e3-b0d4-b472c8d76c74",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 07:19:55.912558+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a0a3ef-ca1d-71e3-b0d4-b472c8d76c74"
    },
    {
      "id": "chg_01a09ec8-b0c4-7b11-8000-639e83123e43",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 07:19:07.390097+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a09ec8-b0c4-7b11-8000-639e83123e43"
    },
    {
      "id": "chg_01a093d6-2380-7784-97a2-0d22aba0398a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 04:17:59.52162+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a093d6-2380-7784-97a2-0d22aba0398a"
    },
    {
      "id": "chg_01a08f54-3fb9-7a5e-9b01-3c638299a0f4",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 07:17:38.049631+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_01a08f54-3fb9-7a5e-9b01-3c638299a0f4"
    },
    {
      "id": "chg_019fe9e8-f702-7dbb-9502-e520dc29f77f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 04:23:06.659512+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fe9e8-f702-7dbb-9502-e520dc29f77f"
    },
    {
      "id": "chg_019fc7ea-4806-7c55-b04f-3a12fe4be8dd",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "30",
        "assessed": "31",
        "resolved": "30",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 13:57:27.67362+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc7ea-4806-7c55-b04f-3a12fe4be8dd"
    },
    {
      "id": "chg_019fc4bd-4ce8-737c-b2ee-ec741b01295b",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:09:28.148707+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc4bd-4ce8-737c-b2ee-ec741b01295b"
    },
    {
      "id": "chg_019fc4bd-4cea-70f1-bd82-30326aca9590",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "setuptools.build_meta",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:09:28.148707+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc4bd-4cea-70f1-bd82-30326aca9590"
    },
    {
      "id": "chg_019fc4bd-4cea-77a0-8682-b1a5d2abbb14",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:09:28.148707+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The code this package runs automatically changed (its declared build backend)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc4bd-4cea-77a0-8682-b1a5d2abbb14"
    },
    {
      "id": "chg_019fc2d7-74eb-723a-97bb-d7b327470410",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 14:18:47.896682+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc2d7-74eb-723a-97bb-d7b327470410"
    },
    {
      "id": "chg_019fc2d7-74ec-72bb-a0af-6f35191e1a62",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 14:18:47.896682+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/tonywang-hub-mcp-cn-commerce/mcp-cn-commerce#chg-chg_019fc2d7-74ec-72bb-a0af-6f35191e1a62"
    }
  ],
  "days": [
    {
      "date": "2026-10-18",
      "total": 67,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-14",
      "total": 52,
      "delta": 27,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 11
    },
    {
      "date": "2026-10-13",
      "total": 25,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-12",
      "total": 40,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-28",
      "total": 25,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-25",
      "total": 25,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-24",
      "total": 40,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-21",
      "total": 25,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}