{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "vibhu-dixit-lybrary",
  "component": "lybrary",
  "generated_at": "2026-11-05T10:53:50.950Z",
  "tracking_since": "2026-10-13",
  "counts": {
    "critical": 7,
    "security": 14,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1ab39-7f8e-740f-86f7-2fc25b23c34d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 10:20:34.544461+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a1ab39-7f8e-740f-86f7-2fc25b23c34d"
    },
    {
      "id": "chg_01a1a5db-5539-7b4b-a244-3fb6417c2a1b",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 09:19:37.250798+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a1a5db-5539-7b4b-a244-3fb6417c2a1b"
    },
    {
      "id": "chg_01a1a0ea-fa60-73b4-9b82-f518bcaf5718",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-03",
      "occurred_at": "2026-11-03 10:18:36.481771+00",
      "observed_since": "2026-11-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a1a0ea-fa60-73b4-9b82-f518bcaf5718"
    },
    {
      "id": "chg_01a190d3-9705-72a9-b749-83bdef28f967",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 07:19:08.26563+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a190d3-9705-72a9-b749-83bdef28f967"
    },
    {
      "id": "chg_01a18c50-c461-7b15-a72f-458ac3f99930",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 10:17:45.800185+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a18c50-c461-7b15-a72f-458ac3f99930"
    },
    {
      "id": "chg_01a17283-cac2-7d60-8ffb-92ebe3c6b552",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112403 no longer affects this package",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac2-7d60-8ffb-92ebe3c6b552"
    },
    {
      "id": "chg_01a17283-cac5-781e-964f-272fe1cb5476",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112900 no longer affects this package",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac5-781e-964f-272fe1cb5476"
    },
    {
      "id": "chg_01a17283-cac5-7e39-a2f3-5cc3eacd0339",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-96639 no longer affects this package",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac5-7e39-a2f3-5cc3eacd0339"
    },
    {
      "id": "chg_01a17283-cac6-73b4-97e2-86f80197f37a",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112398 no longer affects this package",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac6-73b4-97e2-86f80197f37a"
    },
    {
      "id": "chg_01a17283-cac6-788e-b993-e2ed90df7121",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "fail",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "90",
        "assessed": "89",
        "resolved": "88",
        "unresolved": "2",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (fail → partial)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac6-788e-b993-e2ed90df7121"
    },
    {
      "id": "chg_01a17283-cac6-7d45-8dae-65f81c7b0cf0",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.tree_partial",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 10:03:22.153202+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "CVE-2026-112393 no longer affects this package",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a17283-cac6-7d45-8dae-65f81c7b0cf0"
    },
    {
      "id": "chg_01a16cb7-f1c9-7426-b87c-d2b0a04b8416",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 07:02:36.724723+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-112398 affects this package (high)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a16cb7-f1c9-7426-b87c-d2b0a04b8416"
    },
    {
      "id": "chg_01a16cb7-f1ca-7369-88af-5e216126f386",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 07:02:36.724723+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a16cb7-f1ca-7369-88af-5e216126f386"
    },
    {
      "id": "chg_01a16837-533e-72de-a103-7b3e0bdfdb34",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 10:03:38.663583+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-96639 affects this package (high)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a16837-533e-72de-a103-7b3e0bdfdb34"
    },
    {
      "id": "chg_01a16310-ad61-7957-b7f2-f58bdd240505",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 10:03:19.759566+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112393 affects this package (high)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a16310-ad61-7957-b7f2-f58bdd240505"
    },
    {
      "id": "chg_01a16310-ad62-7ae9-8969-54d3132d4524",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 10:03:19.759566+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112900 affects this package (high)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a16310-ad62-7ae9-8969-54d3132d4524"
    },
    {
      "id": "chg_01a15dea-7f82-7370-b304-54a25c1b307d",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.unpatched_critical",
      "from_value": "partial",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "fastembed > pillow",
        "refs": "[\"CVE-2026-112403\"]",
        "seen": "90",
        "package": "pillow",
        "version": "12.3.0",
        "assessed": "89",
        "resolved": "88",
        "severity": "high",
        "transitive": "1",
        "unresolved": "2",
        "vulnerable": "[{\"name\":\"pillow\",\"version\":\"12.3.0\",\"depth\":2,\"path\":[\"fastembed\",\"pillow\"],\"refs\":[\"CVE-2026-112395\",\"CVE-2026-112397\",\"CVE-2026-112400\",\"CVE-2026-112403\",\"CVE-2026-112404\",\"CVE-2026-112895\",\"CVE-2026-112896\",\"CVE-2026-112897\",\"CVE-2026-112899\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 10:03:31.567834+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (partial → fail)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a15dea-7f82-7370-b304-54a25c1b307d"
    },
    {
      "id": "chg_01a15dea-7f83-7393-bfcb-6d3f3c9e561c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 10:03:31.567834+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-112403 affects this package (high)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a15dea-7f83-7393-bfcb-6d3f3c9e561c"
    },
    {
      "id": "chg_01a15dea-7f83-7c30-84b2-7c8f29c824b7",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 10:03:31.567834+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a15dea-7f83-7c30-84b2-7c8f29c824b7"
    },
    {
      "id": "chg_01a139d3-6281-7df2-85f9-27c67fe95303",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 09:51:57.038913+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a139d3-6281-7df2-85f9-27c67fe95303"
    },
    {
      "id": "chg_01a139d3-6283-7547-9c38-83584ed283f4",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "startup_failure",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 09:51:57.038913+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/vibhu-dixit-lybrary/lybrary#chg-chg_01a139d3-6283-7547-9c38-83584ed283f4"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-03",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-30",
      "total": 34,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-25",
      "total": 49,
      "delta": 49,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-10-24",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-23",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}