Auto-published when monitored MCP packages change risk level. Detected via real-time npm registry monitoring.