{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "yashdoke7-skeletongraph",
  "component": "skeletongraph",
  "generated_at": "2026-09-21T00:49:55.644Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a09deb-6034-7cc9-bdf8-b4d64523edeb",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 03:17:23.531079+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_01a09deb-6034-7cc9-bdf8-b4d64523edeb"
    },
    {
      "id": "chg_01a0982c-dd4e-7011-b7d6-7f0003c07861",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 00:31:12.147968+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_01a0982c-dd4e-7011-b7d6-7f0003c07861"
    },
    {
      "id": "chg_01a0842d-5b65-7a8c-a072-96496262c57d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 03:19:20.059082+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_01a0842d-5b65-7a8c-a072-96496262c57d"
    },
    {
      "id": "chg_01a05f6f-12bd-71eb-8232-c131a5a8ac4d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 00:05:09.81922+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_01a05f6f-12bd-71eb-8232-c131a5a8ac4d"
    },
    {
      "id": "chg_01a05b03-73e6-76f9-90e8-e0c45b86f0bf",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 03:29:08.023077+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_01a05b03-73e6-76f9-90e8-e0c45b86f0bf"
    },
    {
      "id": "chg_019fdfba-ccf2-70aa-9e8a-b5daeb334f29",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 04:56:29.086305+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fdfba-ccf2-70aa-9e8a-b5daeb334f29"
    },
    {
      "id": "chg_019fca34-ecaf-79bb-b7f6-1a9e580b3aea",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-5241",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.critical_no_fix",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-5241",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 00:38:13.916108+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-5241 affects this package (high)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fca34-ecaf-79bb-b7f6-1a9e580b3aea"
    },
    {
      "id": "chg_019fca34-ecb0-74c4-ad08-3771207bfbd5",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.critical_no_fix",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "sentence-transformers > transformers",
        "refs": "[\"CVE-2026-5241\"]",
        "seen": "130",
        "package": "transformers",
        "version": "4.57.6",
        "assessed": "72",
        "resolved": "71",
        "severity": "high",
        "transitive": "1",
        "unresolved": "59",
        "vulnerable": "[{\"name\":\"transformers\",\"version\":\"4.57.6\",\"depth\":2,\"path\":[\"sentence-transformers\",\"transformers\"],\"refs\":[\"CVE-2026-4372\",\"CVE-2026-1839\",\"CVE-2026-5241\",\"CVE-2025-14929\",\"CVE-2026-1839\",\"CVE-2026-4372\",\"CVE-2026-5241\"]}]",
        "no_fix_refs": "[\"CVE-2025-14929\",\"CVE-2026-5241\"]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 00:38:13.916108+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fca34-ecb0-74c4-ad08-3771207bfbd5"
    },
    {
      "id": "chg_019fc495-b662-7009-867a-5a13b9a4f35c",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:26:13.690343+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fc495-b662-7009-867a-5a13b9a4f35c"
    },
    {
      "id": "chg_019fc495-b663-7499-937c-0cd24838e60b",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:26:13.690343+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fc495-b663-7499-937c-0cd24838e60b"
    },
    {
      "id": "chg_019fc495-b664-71ab-8183-c62d5cf0f4bc",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:26:13.690343+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fc495-b664-71ab-8183-c62d5cf0f4bc"
    },
    {
      "id": "chg_019fc1ba-1ba5-7a43-8dfb-c578aa56a9fc",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 09:07:07.28642+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fc1ba-1ba5-7a43-8dfb-c578aa56a9fc"
    },
    {
      "id": "chg_019fc1ba-1ba6-7da5-9c1f-b640fa29cd21",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 09:07:07.28642+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fc1ba-1ba6-7da5-9c1f-b640fa29cd21"
    },
    {
      "id": "chg_019fbc52-37c0-7a6e-b96b-75871249d764",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 07:55:32.65939+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fbc52-37c0-7a6e-b96b-75871249d764"
    },
    {
      "id": "chg_019fb19b-0bd6-7965-8c86-297764c7e59b",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 05:59:16.174417+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yashdoke7-skeletongraph/skeletongraph#chg-chg_019fb19b-0bd6-7965-8c86-297764c7e59b"
    }
  ],
  "days": [
    {
      "date": "2026-09-14",
      "total": 15,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 30,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-09",
      "total": 15,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-06",
      "total": 30,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-05",
      "total": 30,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-02",
      "total": 30,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-01",
      "total": 15,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-26",
      "total": 30,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}