{
  "org": "Still OS Digital Holdings LLC",
  "program": "Still OS MCP Supply-Chain Security Research",
  "contact": "security@stillosdigitalholdings.com",
  "description": "Still OS is an independent security-research authority for the MCP (Model Context Protocol) agent-tool ecosystem. Our advisories are machine-readable (CSAF + OSV), we issue STILLOS- identifiers, and we expose a live resident check so any agent or CI can scan its own package manifest on every build.",
  "identifiers": {
    "scheme": "STILLOS-YYYY-NNNN",
    "count": 3
  },
  "license": {
    "id": "CC-BY-4.0",
    "name": "Creative Commons Attribution 4.0 International",
    "url": "https://creativecommons.org/licenses/by/4.0/",
    "attribution": "Still OS Digital Holdings LLC — https://stillosdigitalholdings.com/advisories",
    "permits": [
      "ingest",
      "index",
      "modify (enrich)",
      "public redistribution"
    ],
    "applies_to": "the advisory records in this feed (data only, not Still OS source code)"
  },
  "endpoints": {
    "advisories_human": "https://stillosdigitalholdings.com/advisories",
    "advisories_json": "https://stillosdigitalholdings.com/advisories.json",
    "resident_check": {
      "url": "https://stillosdigitalholdings.com/advisories/check",
      "method": "POST",
      "body": "{\"packages\":[\"@scope/name\", ...]}",
      "returns": "Still OS advisories + load-bearing-floor exposure per package"
    },
    "free_check_human": "https://stillosdigitalholdings.com/advisories/scan",
    "blast_radius": "https://stillosdigitalholdings.com/ratings/floor/<package>",
    "csaf_provider": "https://stillosdigitalholdings.com/advisories/csaf/provider-metadata.json",
    "csaf_feed": "https://stillosdigitalholdings.com/advisories/csaf",
    "osv_feed": "https://stillosdigitalholdings.com/advisories/osv/all.json",
    "update_feed_atom": "https://stillosdigitalholdings.com/advisories/feed.xml",
    "update_feed_delta": "https://stillosdigitalholdings.com/advisories/feed.json?since=<iso8601>",
    "disclosure_policy": "https://stillosdigitalholdings.com/advisories/policy",
    "audit_offer": "https://stillosdigitalholdings.com/advisories/audit",
    "report_or_dispute": "https://stillosdigitalholdings.com/advisories/contact"
  },
  "standards": [
    "CSAF 2.0",
    "OSV schema 1.6.0",
    "RFC 9116 security.txt"
  ]
}