{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "xiaojiou176-open-dealwatch",
  "component": "dealwatch",
  "generated_at": "2026-09-21T01:33:21.663Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 18,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a03836-24eb-7ad7-8f7b-28f4ab055878",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 09:17:47.492866+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_01a03836-24eb-7ad7-8f7b-28f4ab055878"
    },
    {
      "id": "chg_01a022fb-de5e-7783-b6d1-4c1b313f3828",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 06:22:06.828738+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_01a022fb-de5e-7783-b6d1-4c1b313f3828"
    },
    {
      "id": "chg_01a01ebf-5ec8-70c0-9437-255dc42926cc",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:37:33.228188+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_01a01ebf-5ec8-70c0-9437-255dc42926cc"
    },
    {
      "id": "chg_019fcb85-6eed-75e1-a1c1-d03e954f43e3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-54282",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-54282",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-54282 affects this package (high)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6eed-75e1-a1c1-d03e954f43e3"
    },
    {
      "id": "chg_019fcb85-6eee-7aaf-b73a-f8d168b515c6",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48818",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48818",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-48818 affects this package (high)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6eee-7aaf-b73a-f8d168b515c6"
    },
    {
      "id": "chg_019fcb85-6eef-701f-9d5d-2f755ff896d2",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-54283",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-54283",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-54283 affects this package (high)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6eef-701f-9d5d-2f755ff896d2"
    },
    {
      "id": "chg_019fcb85-6eef-7763-a058-68685b3c33cd",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "fastapi > starlette",
        "refs": "[\"CVE-2026-54283\",\"CVE-2026-48710\",\"CVE-2026-54282\",\"CVE-2026-48818\",\"CVE-2026-48817\",\"CVE-2026-48710\",\"CVE-2026-48817\",\"CVE-2026-48818\",\"CVE-2026-54282\",\"CVE-2026-54283\"]",
        "seen": "90",
        "package": "starlette",
        "version": "0.50.0",
        "assessed": "90",
        "resolved": "89",
        "severity": "high",
        "transitive": "1",
        "unresolved": "1",
        "vulnerable": "[{\"name\":\"starlette\",\"version\":\"0.50.0\",\"depth\":2,\"path\":[\"fastapi\",\"starlette\"],\"refs\":[\"CVE-2026-54283\",\"CVE-2026-48710\",\"CVE-2026-54282\",\"CVE-2026-48818\",\"CVE-2026-48817\",\"CVE-2026-48710\",\"CVE-2026-48817\",\"CVE-2026-48818\",\"CVE-2026-54282\",\"CVE-2026-54283\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6eef-7763-a058-68685b3c33cd"
    },
    {
      "id": "chg_019fcb85-6ef0-7257-9437-807fa052541a",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48710",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48710",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-48710 affects this package (high)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6ef0-7257-9437-807fa052541a"
    },
    {
      "id": "chg_019fcb85-6ef0-7823-b131-21e4f8dd250f",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48817",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48817",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-48817 affects this package (high)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6ef0-7823-b131-21e4f8dd250f"
    },
    {
      "id": "chg_019fcb85-6ef0-7d1e-9aa1-167b862c1e95",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:45:47.358815+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fcb85-6ef0-7d1e-9aa1-167b862c1e95"
    },
    {
      "id": "chg_019fc70f-2703-7a81-8b5d-dd15b020bd6f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:58:06.829126+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc70f-2703-7a81-8b5d-dd15b020bd6f"
    },
    {
      "id": "chg_019fc70f-2705-7168-8ffd-f9a58c390935",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:58:06.829126+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc70f-2705-7168-8ffd-f9a58c390935"
    },
    {
      "id": "chg_019fc70f-2705-7912-a161-8a63938a7c55",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "setuptools.build_meta",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:58:06.829126+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc70f-2705-7912-a161-8a63938a7c55"
    },
    {
      "id": "chg_019fc70f-2705-7ef0-94e8-ce7662c7f86b",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:58:06.829126+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc70f-2705-7ef0-94e8-ce7662c7f86b"
    },
    {
      "id": "chg_019fc70f-2706-74c0-9f1d-72b5d0267f96",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:58:06.829126+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc70f-2706-74c0-9f1d-72b5d0267f96"
    },
    {
      "id": "chg_019fc301-b444-78e5-9e5b-6f44a1df22e4",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 15:04:56.616817+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fc301-b444-78e5-9e5b-6f44a1df22e4"
    },
    {
      "id": "chg_019fbe22-e5c6-7627-b82d-213d959da833",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 16:23:05.915359+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fbe22-e5c6-7627-b82d-213d959da833"
    },
    {
      "id": "chg_019fb180-60ac-76fe-8615-050144cecd96",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 05:30:08.419859+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/xiaojiou176-open-dealwatch/dealwatch#chg-chg_019fb180-60ac-76fe-8615-050144cecd96"
    }
  ],
  "days": [
    {
      "date": "2026-08-26",
      "total": 29,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-25",
      "total": 14,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-21",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-20",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-14",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-12",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-11",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-08",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}