{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "yaver-io-yaver",
  "component": "yaver-cli",
  "generated_at": "2026-09-20T20:22:14.924Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 44,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0bdb0-3034-71ee-be36-17e22df99f73",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 07:20:35.343405+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0bdb0-3034-71ee-be36-17e22df99f73"
    },
    {
      "id": "chg_01a0bdb0-3035-731c-8aaa-0f118ec04eaf",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 07:20:35.343405+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0bdb0-3035-731c-8aaa-0f118ec04eaf"
    },
    {
      "id": "chg_01a0ba2e-f8f2-7da9-a482-3e3852658066",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 15:00:35.607637+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0ba2e-f8f2-7da9-a482-3e3852658066"
    },
    {
      "id": "chg_01a0ba2e-f8f3-7e54-8ef1-501f2f8175d7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 15:00:35.607637+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0ba2e-f8f3-7e54-8ef1-501f2f8175d7"
    },
    {
      "id": "chg_01a0a3f1-6678-70fd-9657-b8f9a5da136d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 07:21:41.524619+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0a3f1-6678-70fd-9657-b8f9a5da136d"
    },
    {
      "id": "chg_01a09d38-3521-70fd-8b1e-c6a87ceac8ca",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 00:01:41.572457+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a09d38-3521-70fd-8b1e-c6a87ceac8ca"
    },
    {
      "id": "chg_01a08f53-c636-7ac6-ab6c-c50d8abac05a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 07:17:07.02477+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a08f53-c636-7ac6-ab6c-c50d8abac05a"
    },
    {
      "id": "chg_01a08d55-f29b-7ce3-886d-0052ef53ef64",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 22:00:15.019599+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a08d55-f29b-7ce3-886d-0052ef53ef64"
    },
    {
      "id": "chg_01a0889d-67bb-723d-ad04-52b87b4eed4e",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 00:00:11.7805+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0889d-67bb-723d-ad04-52b87b4eed4e"
    },
    {
      "id": "chg_01a0889d-67c3-7d4a-a826-6bdb1dcf20f3",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 00:00:11.7805+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0889d-67c3-7d4a-a826-6bdb1dcf20f3"
    },
    {
      "id": "chg_01a07fe0-fdd9-7ceb-b631-fd177b5db72c",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 07:17:26.401114+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a07fe0-fdd9-7ceb-b631-fd177b5db72c"
    },
    {
      "id": "chg_01a0792c-d0f0-70e7-a397-5ea2d2abe160",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 00:02:55.248788+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0792c-d0f0-70e7-a397-5ea2d2abe160"
    },
    {
      "id": "chg_01a07590-5467-76df-a1f2-27bf3996d73f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 07:13:08.121641+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a07590-5467-76df-a1f2-27bf3996d73f"
    },
    {
      "id": "chg_01a07396-2cc1-75db-a05e-5edda8c6238e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 22:00:16.4047+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a07396-2cc1-75db-a05e-5edda8c6238e"
    },
    {
      "id": "chg_01a06b44-13b1-7bf4-9859-91d21bc00605",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 07:13:38.540762+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a06b44-13b1-7bf4-9859-91d21bc00605"
    },
    {
      "id": "chg_01a06b44-13b2-7c67-aecb-85f9ecb7ff41",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 07:13:38.540762+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a06b44-13b2-7c67-aecb-85f9ecb7ff41"
    },
    {
      "id": "chg_01a0650a-206a-7086-95cc-d31de309746e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:12:37.538277+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0650a-206a-7086-95cc-d31de309746e"
    },
    {
      "id": "chg_01a0650a-206b-7885-b702-b89ace8940b2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:12:37.538277+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0650a-206b-7885-b702-b89ace8940b2"
    },
    {
      "id": "chg_01a0650a-206c-7035-9e1f-af81144760d4",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 02:12:37.538277+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0650a-206c-7035-9e1f-af81144760d4"
    },
    {
      "id": "chg_01a060f6-a09e-78f1-88f2-5f33ddc5539a",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 07:12:50.681429+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a060f6-a09e-78f1-88f2-5f33ddc5539a"
    },
    {
      "id": "chg_01a060f6-a09f-75f6-bf83-1546db86e250",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 07:12:50.681429+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a060f6-a09f-75f6-bf83-1546db86e250"
    },
    {
      "id": "chg_01a05ec5-d17d-773a-b974-614d968eb39f",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 21:00:17.625155+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a05ec5-d17d-773a-b974-614d968eb39f"
    },
    {
      "id": "chg_01a05ec5-d17e-716f-b8ba-3c7b5fc44fe5",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 21:00:17.625155+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a05ec5-d17e-716f-b8ba-3c7b5fc44fe5"
    },
    {
      "id": "chg_01a05bd0-71e8-7ebe-a4c5-5d8f1e204286",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 07:13:02.381563+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a05bd0-71e8-7ebe-a4c5-5d8f1e204286"
    },
    {
      "id": "chg_01a0555f-e076-7368-905d-677d82103161",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 01:12:21.780745+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0555f-e076-7368-905d-677d82103161"
    },
    {
      "id": "chg_01a052c1-83ad-7ac2-ab8d-8552e0ed1dc1",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 13:00:08.626523+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a052c1-83ad-7ac2-ab8d-8552e0ed1dc1"
    },
    {
      "id": "chg_01a046c8-a5bb-7d70-86e7-dae3412a5e57",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 05:12:29.730192+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a046c8-a5bb-7d70-86e7-dae3412a5e57"
    },
    {
      "id": "chg_01a04573-c2d5-7cdb-b2e7-b2ef0ccdc586",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 23:00:09.50673+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a04573-c2d5-7cdb-b2e7-b2ef0ccdc586"
    },
    {
      "id": "chg_01a037c2-3c75-72fc-b371-7aceb0fe087e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 07:11:11.342511+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a037c2-3c75-72fc-b371-7aceb0fe087e"
    },
    {
      "id": "chg_01a035c9-da05-79ce-86ee-3fe27fc53a31",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 22:00:16.034233+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a035c9-da05-79ce-86ee-3fe27fc53a31"
    },
    {
      "id": "chg_01a0330a-4089-7335-b1ff-93b9fe54e053",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 09:11:44.888648+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0330a-4089-7335-b1ff-93b9fe54e053"
    },
    {
      "id": "chg_01a02d75-5134-7825-bfee-bed6a24f1468",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-23",
      "occurred_at": "2026-08-23 07:10:58.263933+00",
      "observed_since": "2026-08-22",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a02d75-5134-7825-bfee-bed6a24f1468"
    },
    {
      "id": "chg_01a02b7d-219a-7596-b606-8ab2a3a62154",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_redirected",
      "to_code": "provenance.repo_verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 22:00:15.938801+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Source repository (fail → pass)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a02b7d-219a-7596-b606-8ab2a3a62154"
    },
    {
      "id": "chg_01a02b46-3bfc-7ddb-b506-ed72b1ad0cf2",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 21:00:18.045803+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a02b46-3bfc-7ddb-b506-ed72b1ad0cf2"
    },
    {
      "id": "chg_01a0298e-a56c-77b3-bfe8-3431b42d4ecd",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 13:00:09.375299+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_01a0298e-a56c-77b3-bfe8-3431b42d4ecd"
    },
    {
      "id": "chg_019fea81-2a5a-7682-8817-1884b9834704",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "yaver-mobile-headless > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2025-66414\"]",
        "seen": "17",
        "package": "@modelcontextprotocol/sdk",
        "version": "0.6.1",
        "assessed": "18",
        "resolved": "17",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"0.6.1\",\"depth\":2,\"path\":[\"yaver-mobile-headless\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2025-66414\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 07:09:21.285682+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fea81-2a5a-7682-8817-1884b9834704"
    },
    {
      "id": "chg_019fe602-aefb-7dc2-9f80-b2ee3f6fac8e",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 10:12:43.366623+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fe602-aefb-7dc2-9f80-b2ee3f6fac8e"
    },
    {
      "id": "chg_019fcbdd-2b65-7636-b138-9922384ea472",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 08:21:37.237571+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fcbdd-2b65-7636-b138-9922384ea472"
    },
    {
      "id": "chg_019fc6ab-d188-763f-9948-27c8f2610e7c",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 08:09:36.881817+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fc6ab-d188-763f-9948-27c8f2610e7c"
    },
    {
      "id": "chg_019fc264-9bd3-7887-aadb-e2fbce7542b7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 12:13:21.208976+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fc264-9bd3-7887-aadb-e2fbce7542b7"
    },
    {
      "id": "chg_019fbf60-2f93-7b0f-9da6-81ade2c2b252",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 22:09:39.71411+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fbf60-2f93-7b0f-9da6-81ade2c2b252"
    },
    {
      "id": "chg_019fbf60-2f94-7e42-859c-7218b0acfe03",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 22:09:39.71411+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fbf60-2f94-7e42-859c-7218b0acfe03"
    },
    {
      "id": "chg_019fb1fa-a68e-7767-88c2-6b8d61d2689f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 07:43:41.701339+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019fb1fa-a68e-7767-88c2-6b8d61d2689f"
    },
    {
      "id": "chg_019faac5-08e4-7593-9769-c3f106f04748",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 22:07:47.418401+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/yaver-io-yaver/yaver-cli#chg-chg_019faac5-08e4-7593-9769-c3f106f04748"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-19",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-18",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 34,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 19,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-11",
      "total": 34,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-10",
      "total": 19,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 9
    }
  ]
}