{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "zereight-gitlab-mcp",
  "component": "zereight-mcp-gitlab",
  "generated_at": "2026-09-21T01:45:30.713Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 32,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0bd7e-cf27-707f-b462-adb046dd5c43",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 06:26:39.320607+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0bd7e-cf27-707f-b462-adb046dd5c43"
    },
    {
      "id": "chg_01a0bd7e-cf28-7814-a781-6195721fac0a",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-20",
      "occurred_at": "2026-09-20 06:26:39.320607+00",
      "observed_since": "2026-09-19",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0bd7e-cf28-7814-a781-6195721fac0a"
    },
    {
      "id": "chg_01a0bad3-a435-721a-93cc-899cda59a278",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 18:00:27.348804+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0bad3-a435-721a-93cc-899cda59a278"
    },
    {
      "id": "chg_01a0bad3-a436-7d90-b5c5-126598db7cb9",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-19",
      "occurred_at": "2026-09-19 18:00:27.348804+00",
      "observed_since": "2026-09-18",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0bad3-a436-7d90-b5c5-126598db7cb9"
    },
    {
      "id": "chg_01a0ae0e-e441-7bff-a0f4-7114fe289391",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 06:30:06.316603+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0ae0e-e441-7bff-a0f4-7114fe289391"
    },
    {
      "id": "chg_01a0ae0e-e444-7b75-bd7d-117344ebf11a",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 06:30:06.316603+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0ae0e-e444-7b75-bd7d-117344ebf11a"
    },
    {
      "id": "chg_01a0ac3c-56bb-7488-884e-958fd023f4d9",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 22:00:30.367786+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0ac3c-56bb-7488-884e-958fd023f4d9"
    },
    {
      "id": "chg_01a0ac3c-56be-745f-a0c9-61751030f782",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-16",
      "occurred_at": "2026-09-16 22:00:30.367786+00",
      "observed_since": "2026-09-15",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0ac3c-56be-745f-a0c9-61751030f782"
    },
    {
      "id": "chg_01a089fd-ac2e-71b4-bd38-e739555f8b61",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 06:24:58.224482+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a089fd-ac2e-71b4-bd38-e739555f8b61"
    },
    {
      "id": "chg_01a089fd-ac2f-794f-9b74-3f663640c527",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 06:24:58.224482+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a089fd-ac2f-794f-9b74-3f663640c527"
    },
    {
      "id": "chg_01a08755-7d71-72ca-876e-6dc133193fa8",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 18:02:01.787267+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a08755-7d71-72ca-876e-6dc133193fa8"
    },
    {
      "id": "chg_01a08755-7d77-72a1-9ac2-0159e3fcfe44",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 18:02:01.787267+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a08755-7d77-72a1-9ac2-0159e3fcfe44"
    },
    {
      "id": "chg_01a05ba3-2bbd-7308-8e22-2afde910d665",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "165",
        "assessed": "166",
        "resolved": "165",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 06:23:35.336529+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a05ba3-2bbd-7308-8e22-2afde910d665"
    },
    {
      "id": "chg_01a05ba3-2bbe-709f-bf84-139fa8cc45d2",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 06:23:35.336529+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a05ba3-2bbe-709f-bf84-139fa8cc45d2"
    },
    {
      "id": "chg_01a05ba3-2bbe-7541-9735-4c1b311058a3",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-01",
      "occurred_at": "2026-09-01 06:23:35.336529+00",
      "observed_since": "2026-08-31",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a05ba3-2bbe-7541-9735-4c1b311058a3"
    },
    {
      "id": "chg_01a0588c-f881-74d8-8913-31b2da3f46a0",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 16:00:28.054938+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0588c-f881-74d8-8913-31b2da3f46a0"
    },
    {
      "id": "chg_01a0581f-2f06-78b6-8115-43ee0e13abf9",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 14:00:33.399987+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0581f-2f06-78b6-8115-43ee0e13abf9"
    },
    {
      "id": "chg_01a0581f-2f09-71d7-888a-ea4466e4543c",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 14:00:33.399987+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a0581f-2f09-71d7-888a-ea4466e4543c"
    },
    {
      "id": "chg_01a04c3e-8238-79d9-ae50-451962622284",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 06:39:20.049199+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a04c3e-8238-79d9-ae50-451962622284"
    },
    {
      "id": "chg_01a04c3e-823a-7091-b748-465589b29b9b",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-29",
      "occurred_at": "2026-08-29 06:39:20.049199+00",
      "observed_since": "2026-08-28",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a04c3e-823a-7091-b748-465589b29b9b"
    },
    {
      "id": "chg_01a048ab-e189-70f4-8460-4cde0fb92320",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 14:00:18.834809+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a048ab-e189-70f4-8460-4cde0fb92320"
    },
    {
      "id": "chg_01a048ab-e18a-7bd4-9cf9-66f508854aea",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 14:00:18.834809+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a048ab-e18a-7bd4-9cf9-66f508854aea"
    },
    {
      "id": "chg_01a02d46-d21f-7b07-a6e4-5941f76dae7d",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-08-23",
      "occurred_at": "2026-08-23 06:20:11.06684+00",
      "observed_since": "2026-08-22",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a02d46-d21f-7b07-a6e4-5941f76dae7d"
    },
    {
      "id": "chg_01a02a33-a2b4-724f-aff8-b70879249dda",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 16:00:22.096629+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_01a02a33-a2b4-724f-aff8-b70879249dda"
    },
    {
      "id": "chg_019fe013-a3a0-7eef-af08-138f4b42b09b",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.tree_partial",
      "to_code": "cve.none",
      "from_value": "partial",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "165",
        "assessed": "166",
        "resolved": "165",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 06:33:31.275352+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Known CVEs (partial → pass)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fe013-a3a0-7eef-af08-138f4b42b09b"
    },
    {
      "id": "chg_019fc456-28a8-7523-a6c0-079ed0813e5f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.tree_partial",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "165",
        "assessed": "165",
        "resolved": "164",
        "unresolved": "1",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:16:48.662606+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → partial)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc456-28a8-7523-a6c0-079ed0813e5f"
    },
    {
      "id": "chg_019fc456-28a7-70f1-aab9-fd82c1234fea",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:16:48.662606+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc456-28a7-70f1-aab9-fd82c1234fea"
    },
    {
      "id": "chg_019fc456-28a7-7ede-ab31-4189a9d7eeb9",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "zereight/gitlab-mcp"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:16:48.662606+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → pass)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc456-28a7-7ede-ab31-4189a9d7eeb9"
    },
    {
      "id": "chg_019fc456-28a8-79a6-897a-fb83ea77015e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:16:48.662606+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc456-28a8-79a6-897a-fb83ea77015e"
    },
    {
      "id": "chg_019fc456-28a9-7024-9792-f5b81fab5f03",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "zereight/gitlab-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "zereight/gitlab-mcp",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:16:48.662606+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The attested source repository moved (zereight/gitlab-mcp)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc456-28a9-7024-9792-f5b81fab5f03"
    },
    {
      "id": "chg_019fc11e-2f59-7b9f-821c-bcf4b2ef2339",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 06:16:48.716991+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fc11e-2f59-7b9f-821c-bcf4b2ef2339"
    },
    {
      "id": "chg_019fb053-16cd-7b25-8dc9-575859a52c6c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 00:01:03.122298+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zereight-gitlab-mcp/zereight-mcp-gitlab#chg-chg_019fb053-16cd-7b25-8dc9-575859a52c6c"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-19",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-18",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-16",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-15",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-10",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-09",
      "total": 49,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    }
  ]
}