jtalk22/slack-mcp-server erreicht einen Gesundheitsindex von 81 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Vitality (89/100) ab, am schwächsten bei Sustainability & Governance (51/100). Zuletzt vor 2 Tagen aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
81
gesamt / 100
Exzellent
Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
81
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 69 wird auf der veröffentlichten Indexskala auf 81 kalibriert (Register-Kalibrierung 2026-08-02).
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25
Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40
Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
source
osv
advisories
0
affected_packages
0
assessed_packages
95
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von npm:@jtalk22/slack-mcp@4.6.0 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 95 Paketen. Erreichbarkeit wird nicht analysiert.
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 20 ⇿
0Sterne
20Forks
32Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 3Minor 9Patch 20
OpenSSF Scorecard 6.2 / 10
6.2Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-30 17:27 UTC
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 2 direkte und 169 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
Registry
Paket
Version
Beziehung
npm
@modelcontextprotocol/sdk
1.29.0
direkt
npm
express
5.2.1
direkt
npm
@cloudflare/puppeteer
1.1.0
indirekt
npm
@hono/node-server
1.19.13
indirekt
npm
@puppeteer/browsers
2.2.4
indirekt
npm
@tootallnate/quickjs-emscripten
0.23.0
indirekt
npm
@types/node
25.4.0
indirekt
npm
@types/yauzl
2.10.3
indirekt
npm
accepts
2.0.0
indirekt
npm
agent-base
7.1.4
indirekt
npm
ajv
8.18.0
indirekt
npm
ajv-formats
3.0.1
indirekt
npm
ansi-regex
5.0.1
indirekt
npm
ansi-styles
4.3.0
indirekt
npm
ast-types
0.13.4
indirekt
npm
b4a
1.8.0
indirekt
npm
bare-events
2.8.2
indirekt
npm
bare-fs
4.5.5
indirekt
npm
bare-os
3.7.1
indirekt
npm
bare-path
3.0.0
indirekt
npm
bare-stream
2.8.1
indirekt
npm
bare-url
2.3.2
indirekt
npm
base64-js
1.5.1
indirekt
npm
basic-ftp
5.3.1
indirekt
npm
body-parser
2.3.0
indirekt
npm
buffer
5.7.1
indirekt
npm
buffer-crc32
0.2.13
indirekt
npm
bytes
3.1.2
indirekt
npm
call-bind-apply-helpers
1.0.2
indirekt
npm
call-bound
1.0.4
indirekt
npm
cliui
8.0.1
indirekt
npm
color-convert
2.0.1
indirekt
npm
color-name
1.1.4
indirekt
npm
content-disposition
1.1.0
indirekt
npm
content-type
1.0.5
indirekt
npm
content-type
2.0.0
indirekt
npm
cookie
0.7.2
indirekt
npm
cookie-signature
1.2.2
indirekt
npm
cors
2.8.5
indirekt
npm
cross-spawn
7.0.6
indirekt
npm
data-uri-to-buffer
6.0.2
indirekt
npm
debug
4.4.3
indirekt
npm
degenerator
5.0.1
indirekt
npm
depd
2.0.0
indirekt
npm
devtools-protocol
0.0.1299070
indirekt
npm
dunder-proto
1.0.1
indirekt
npm
ee-first
1.1.1
indirekt
npm
emoji-regex
8.0.0
indirekt
npm
encodeurl
2.0.0
indirekt
npm
end-of-stream
1.4.5
indirekt
npm
es-define-property
1.0.1
indirekt
npm
es-errors
1.3.0
indirekt
npm
es-object-atoms
1.1.1
indirekt
npm
escalade
3.2.0
indirekt
npm
escape-html
1.0.3
indirekt
npm
escodegen
2.1.0
indirekt
npm
esprima
4.0.1
indirekt
npm
estraverse
5.3.0
indirekt
npm
esutils
2.0.3
indirekt
npm
etag
1.8.1
indirekt
npm
events-universal
1.0.1
indirekt
npm
eventsource
3.0.7
indirekt
npm
eventsource-parser
3.0.6
indirekt
npm
express-rate-limit
8.3.1
indirekt
npm
extract-zip
2.0.1
indirekt
npm
fast-deep-equal
3.1.3
indirekt
npm
fast-fifo
1.3.2
indirekt
npm
fast-uri
3.1.4
indirekt
npm
fd-slicer
1.1.0
indirekt
npm
finalhandler
2.1.1
indirekt
npm
forwarded
0.2.0
indirekt
npm
fresh
2.0.0
indirekt
npm
fsevents
2.3.2
indirekt
npm
function-bind
1.1.2
indirekt
npm
get-caller-file
2.0.5
indirekt
npm
get-intrinsic
1.3.0
indirekt
npm
get-proto
1.0.1
indirekt
npm
get-stream
5.2.0
indirekt
npm
get-uri
6.0.5
indirekt
npm
gopd
1.2.0
indirekt
npm
has-symbols
1.1.0
indirekt
npm
hasown
2.0.2
indirekt
npm
hono
4.12.31
indirekt
npm
http-errors
2.0.1
indirekt
npm
http-proxy-agent
7.0.2
indirekt
npm
https-proxy-agent
7.0.6
indirekt
npm
iconv-lite
0.7.2
indirekt
npm
ieee754
1.2.1
indirekt
npm
inherits
2.0.4
indirekt
npm
ip-address
10.2.0
indirekt
npm
ipaddr.js
1.9.1
indirekt
npm
is-fullwidth-code-point
3.0.0
indirekt
npm
is-promise
4.0.0
indirekt
npm
isexe
2.0.0
indirekt
npm
jose
6.1.3
indirekt
npm
json-schema-traverse
1.0.0
indirekt
npm
json-schema-typed
8.0.2
indirekt
npm
lru-cache
7.18.3
indirekt
npm
math-intrinsics
1.1.0
indirekt
npm
media-typer
1.1.0
indirekt
npm
merge-descriptors
2.0.0
indirekt
npm
mime-db
1.54.0
indirekt
npm
mime-types
3.0.2
indirekt
npm
ms
2.1.3
indirekt
npm
negotiator
1.0.0
indirekt
npm
netmask
2.0.2
indirekt
npm
object-assign
4.1.1
indirekt
npm
object-inspect
1.13.4
indirekt
npm
on-finished
2.4.1
indirekt
npm
once
1.4.0
indirekt
npm
pac-proxy-agent
7.2.0
indirekt
npm
pac-resolver
7.0.1
indirekt
npm
parseurl
1.3.3
indirekt
npm
path-key
3.1.1
indirekt
npm
path-to-regexp
8.4.0
indirekt
npm
pend
1.2.0
indirekt
npm
pkce-challenge
5.0.1
indirekt
npm
playwright
1.61.1
indirekt
npm
playwright-core
1.61.1
indirekt
npm
progress
2.0.3
indirekt
npm
proxy-addr
2.0.7
indirekt
npm
proxy-agent
6.5.0
indirekt
npm
proxy-from-env
1.1.0
indirekt
npm
pump
3.0.4
indirekt
npm
qs
6.15.2
indirekt
npm
range-parser
1.2.1
indirekt
npm
raw-body
3.0.2
indirekt
npm
require-directory
2.1.1
indirekt
npm
require-from-string
2.0.2
indirekt
npm
router
2.2.0
indirekt
npm
safer-buffer
2.1.2
indirekt
npm
semver
7.7.4
indirekt
npm
send
1.2.1
indirekt
npm
serve-static
2.2.1
indirekt
npm
setprototypeof
1.2.0
indirekt
npm
shebang-command
2.0.0
indirekt
npm
shebang-regex
3.0.0
indirekt
npm
side-channel
1.1.0
indirekt
npm
side-channel-list
1.0.0
indirekt
npm
side-channel-map
1.0.1
indirekt
npm
side-channel-weakmap
1.0.2
indirekt
npm
smart-buffer
4.2.0
indirekt
npm
socks
2.8.7
indirekt
npm
socks-proxy-agent
8.0.5
indirekt
npm
source-map
0.6.1
indirekt
npm
statuses
2.0.2
indirekt
npm
streamx
2.23.0
indirekt
npm
string-width
4.2.3
indirekt
npm
strip-ansi
6.0.1
indirekt
npm
tar-fs
3.1.2
indirekt
npm
tar-stream
3.1.8
indirekt
npm
teex
1.0.1
indirekt
npm
text-decoder
1.2.7
indirekt
npm
through
2.3.8
indirekt
npm
toidentifier
1.0.1
indirekt
npm
tslib
2.8.1
indirekt
npm
type-is
2.1.0
indirekt
npm
unbzip2-stream
1.4.3
indirekt
npm
undici-types
7.18.2
indirekt
npm
unpipe
1.0.0
indirekt
npm
vary
1.1.2
indirekt
npm
which
2.0.2
indirekt
npm
wrap-ansi
7.0.0
indirekt
npm
wrappy
1.0.2
indirekt
npm
ws
8.21.0
indirekt
npm
y18n
5.0.8
indirekt
npm
yargs
17.7.2
indirekt
npm
yargs-parser
21.1.1
indirekt
npm
yauzl
2.10.0
indirekt
npm
zod
4.3.4
indirekt
npm
zod-to-json-schema
3.25.1
indirekt
Abhängigkeits-Advisories 0
Die Installation von npm:@jtalk22/slack-mcp@4.6.0 zieht 95 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.
Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"is_fork": false,
"size_kb": 128141,
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"languages": {
"Shell": 9922,
"Dockerfile": 1486,
"JavaScript": 374396,
"Go Template": 152008
},
"pushed_at": "2026-07-28T16:47:42Z",
"created_at": "2026-01-03T19:19:56Z",
"owner_type": "User",
"updated_at": "2026-07-28T16:48:41Z",
"description": "Slack for your AI agent — session tokens, not OAuth. No app to register, no admin approval. Works with any MCP client. 21 tools.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"Go Template"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "jtalk22",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4",
"created_at": "2023-08-10T05:59:22Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1085
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.6.0",
"kind": "minor",
"published_at": "2026-07-21T22:11:03Z"
},
{
"tag": "v4.5.0",
"kind": "minor",
"published_at": "2026-07-21T21:53:40Z"
},
{
"tag": "v4.4.3",
"kind": "patch",
"published_at": "2026-07-03T12:01:20Z"
},
{
"tag": "v4.4.2",
"kind": "patch",
"published_at": "2026-07-02T23:39:53Z"
},
{
"tag": "v4.4.1",
"kind": "patch",
"published_at": "2026-07-02T23:39:34Z"
},
{
"tag": "v4.4.0",
"kind": "minor",
"published_at": "2026-06-09T14:45:43Z"
},
{
"tag": "v4.3.0",
"kind": "minor",
"published_at": "2026-05-12T19:02:16Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2026-04-26T16:08:51Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2026-04-26T16:02:21Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2026-04-26T15:44:44Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2026-03-31T15:46:31Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2026-03-30T04:46:04Z"
},
{
"tag": "v3.2.5",
"kind": "patch",
"published_at": "2026-03-12T00:25:26Z"
},
{
"tag": "v3.2.4",
"kind": "patch",
"published_at": "2026-03-11T02:11:17Z"
},
{
"tag": "v3.2.3",
"kind": "patch",
"published_at": "2026-03-11T00:21:01Z"
},
{
"tag": "v3.2.2",
"kind": "patch",
"published_at": "2026-03-10T19:26:55Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-03-10T14:40:27Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-03-10T14:11:44Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-02-28T04:08:08Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-26T12:49:41Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-02-26T10:35:38Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-02-25T05:53:00Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-02-25T05:31:17Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-02-24T14:28:58Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-01-22T17:36:37Z"
},
{
"tag": "v1.1.9",
"kind": "patch",
"published_at": "2026-01-09T00:55:04Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2026-01-09T00:36:28Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2026-01-08T23:09:54Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2026-01-08T20:33:13Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2026-01-08T20:04:52Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2026-01-08T13:45:12Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-08T13:34:37Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-01-03T21:29:23Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-01-03T21:17:05Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-01-03T21:14:46Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-01-03T19:30:22Z"
}
],
"recent_commits": [
{
"oid": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"body": "The hosted section listed three inference tools (smart_search, catch_me_up,\ntriage) — the three that ship in this package as upgrade stubs. The hosted\nbrain actually runs a fourth, slack_workflow_brief, which renders a saved\nworkflow profile into a contract-validated brief and has no OSS stub.\n\nNaming it keeps the OSS and hosted surfaces telling the same story. The\ntool table is unchanged: this package still ships exactly 21 tools.",
"is_bot": false,
"headline": "docs(readme): name the hosted brain fourth inference tool (#195)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T16:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "640b9628a4ff7eac4f2a5612c43693143d525eb0",
"body": "Naming another server in our own README introduces a competitor most\nreaders never knew existed — free publicity handed to a larger repo, and\nself-defeating on a page whose job is to win the reader. The differentiators\nthat block carried (automatic Chrome extraction, managed hosted OAuth,\nkeychain-o\n[…]\n in their own sections, so\nnothing substantive is lost. The How-the-Chrome-extraction-works section\nstays — that stands entirely on its own.\n\nGates: language, public-surface-integrity, drift all pass.",
"is_bot": false,
"headline": "docs(readme): remove the competitor-comparison block (#194)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T13:05:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bde8aebd43c6a0003e6b425323cc6617e3ad1e4d",
"body": "…internals (#193)\n\nTwo positioning gaps a Show HN thread surfaces in its first comments:\n\n1. korotovsky/slack-mcp-server (the established Go server with the same\n session-token approach) was never mentioned. Added an honest candor\n <details> that credits its breadth (Apps, GovSlack, Group DMs) a\n[…]\nChrome exact\n PBKDF2 then AES-128-CBC v10 scheme, linking the readable lib/token-store.js.\n\nNo tool/count changes. Banned-language, public-surface-integrity, and\ngenerated-page drift gates all pass.",
"is_bot": false,
"headline": "docs(readme): address the incumbent + document the Chrome-extraction …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:51:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5b105501b7b23c8846c70ca4594d41404febff",
"body": "Both demo wrapper pages still carried the old navy palette while the poster,\nREADME hero, and recorded demo set had moved to the near-black / coral / teal\ntriad. This aligns them.\n\n- demo-video.html: near-black ground with faint coral (left) + teal (right)\n corner glows, replacing the navy gradient\n[…]\nzed to the brand muted token.\n\nRegenerated public/* from templates. Drift, banned-language, and\npublic-surface-integrity gates all pass. Renders verified at desktop 1440\nand mobile 390 for both pages.",
"is_bot": false,
"headline": "style(demo-pages): brand-align demo wrappers to poster canon (#192)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:46:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53a4a5b42e1722b9d4d19a1a69c6f04665d05729",
"body": "… (#191)\n\nRoot cause (confirmed via live computed styles + a known-good repo): GitHub\nrenders images inside an align=center container as display:block, so every\nbadge took its own line no matter the syntax (raw HTML, single-line, or\nmarkdown all stacked). Markdown badges OUTSIDE any align wrapper render inline\nand flow — the pattern Hono and many top repos use. Moved the five badges to a\nplain markdown row above the centered hero; nbsp-joined so they never split.",
"is_bot": false,
"headline": "fix(readme): badges flow as one row — move out of the align container…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d456c3278d725d2aab769e9fd8a0457e7edd4a78",
"body": "… (#189)\n\nRoot cause of the stacking: GitHub renders raw-HTML <img> inside the centered\nblock as display:block, so each anchor-wrapped badge took its own line no matter\nthe source formatting (confirmed via computed style on the live page). Markdown\nimage-link syntax renders the images inline in text flow — the canonical badge-row\npattern. Now one clean centered row of five.",
"is_bot": false,
"headline": "fix(readme): badges as markdown image-links so they flow into one row…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:24:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85313a2ba9295707c62883e1475ad9566458de4f",
"body": "… (#190)\n\nReworked the demo from a flat gray chat mock into the poster in motion, shot at\nretina and kept at full resolution instead of downscaled to muddy.\n\nArt direction (templates/public-pages/demo-slack-mcp.html.tpl):\n- Palette moved off the gray mock onto the poster triad — near-black ground,\n \n[…]\n scene boundaries and expanded 6 -> 7\n(the redesign gave each tool capability its own scene; the user-lookup scene now\nhas its own chapter). JSON-LD uploadDate refreshed; PT3M24S still holds (204.8s).",
"is_bot": false,
"headline": "feat(demo): higher-scale brand-directed demo video + retimed chapters…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:15:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "778f1596fb2aebbb0d63860c573fed6ec08a6873",
"body": "…188)\n\nThe badges were rendering one-per-line (each individually centered) because\neach anchor sat on its own source line inside the centered block. Collapsed to\na single line so they flow into one centered row, and trimmed 7->5: dropped the\nMIT and stars badges, both already shown in GitHub's own chrome (license tab +\nstar count in the repo header). Kept the five that aren't surfaced elsewhere:\nnpm version, weekly downloads, CI, MCP Registry, provenance.",
"is_bot": false,
"headline": "fix(readme): badges to one clean row — single source line, 5 not 7 (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba364cb2db1cfb7bb2bc6c8955e01a756e863e81",
"body": "…d, tighter crop, wider display (#187)\n\nThe GIF opened on a title card cropped from the poster's 47->0 band — so the\nreader met the same big idea twice within 30 lines, then the session text\nrendered ~8px, illegible. Re-cut: no title card (starts on the real session,\nde-duped), tight content crop dropping the window chrome and dead margins,\n1120px source displayed at 900px. Every line now reads — the tool names, the\nunread counts, the briefing. 122KB, loops, end-freeze on the briefing.",
"is_bot": false,
"headline": "fix(readme): legible watch-it-run GIF — drop the poster-dup title car…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c24f836b4cde6aacb215ba815a1fa98711ee827",
"body": "… pile (#186)\n\nThe CI badge (github-native SVG) and the stars badge (style=social) were\ndifferent heights from the flat shields, so the 7-badge row cascaded into a\ndiagonal staircase. All seven now render flat-square at one height and wrap\ninto a clean centered row. CI switched to the shields status endpoint for the\nsame reason; stars href stays repo-root (not /stargazers — that 404s).",
"is_bot": false,
"headline": "fix(readme): uniform flat-square badges — kill the staggered masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:17:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a1b89822ca0fd7455081326db207aa32ff8284",
"body": "…voice (#185)\n\nThe package already ships SLSA provenance attestations (verified live on\n4.6.0) but nothing advertised it. For a tool you hand a live session cookie,\na verifiable supply chain is the strongest honest credibility signal there is.\n\n- Masthead: 'provenance signed' badge (teal), anchors t\n[…]\n\n- package.json: funding field (GitHub Sponsors) so npm surfaces the fund link\n\nNo rename: keeping @jtalk22/slack-mcp — the 4.7k/mo downloads are earned proof\na fresh package name would reset to zero.",
"is_bot": false,
"headline": "feat(readme): surface signed provenance + npm funding, sharpen trust …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:53:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30df7d565142d14920c921bef91296e15ce35380",
"body": null,
"is_bot": false,
"headline": "chore: remove stray verification screenshots from repo root (#184)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07d2ffb02e94380c5f9c608720e85d7ce34117e0",
"body": "Native cue rendering drew full-size captions over the video controls on the\nmuted autoplay hero. Track stays for accessibility; default off. The\ndemo-video page keeps captions default-on (user-initiated viewing).",
"is_bot": false,
"headline": "fix(landing): captions opt-in on the autoplay hero (#183)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed8f7f0932ba9f62fc17fa3520a228d1c39ee1e8",
"body": "…badge, crawl files (#182)\n\n- Landing palette retuned from navy-blue drift to the poster triad:\n near-black surfaces, coral accent, teal links/highlights — one token map,\n every hex accounted for\n- Hero shell now plays the full re-mastered landscape clip with the 47->0\n poster as its cover (was: \n[…]\n the retimed cue file\n- README: npm weekly-downloads badge (real, earned proof) + honest pointer\n to the prompt-recipe doc from the Workflows section\n- robots.txt + sitemap.xml for the Pages surfaces",
"is_bot": false,
"headline": "feat(landing): poster-triad palette, full landscape hero clip, proof …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:57:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "455c15d9480d2e86332d6509a0ce5230d9827589",
"body": "- lib/public-pages.js:40 (landing self-host card) was a third note string\n missed by #177 — now matches the canon six-client list\n- Landing title claimed a 30-second install while the audited claim\n everywhere else is ~2 minutes — retitled to the positioning line, which\n also puts the agent phrasing in the SEO title",
"is_bot": false,
"headline": "fix(pages): landing client list to canon, honest title (#181)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f259fb86752dbae928441fcd6c50a22203e7ae9a",
"body": "…es, CI-gated claims, demo re-capture (#180)",
"is_bot": false,
"headline": "docs: record repo gotchas — branch naming vs guardrail, generated pag…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:46:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "866a73fc09c0575087fc67cf745ecc6017f61c9e",
"body": "Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [docker/login-action](https://github.com/docker/login-action).\n\n\nUpdates `actions/checkout` from 7.0.0 to 7.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://gi\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 2 updates (#176)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-27T18:43:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c320a4e1e18c1bc4de46eb9c8b8b9d9fc2f04362",
"body": "Salvaged from the 2026-05-26 review-workflow branch with both action pins\nrefreshed to current (checkout to the repo-wide v7 pin, the review action\nto the latest v1 SHA). Fires on @-mentions in issues, PR comments, and\nreviews; read-only permissions plus actions:read for CI results. Uses the\nrepo OAuth token secret set 2026-05-26. Draws on the monthly cloud review\ncap.",
"is_bot": false,
"headline": "ci: add mention-triggered review workflow (#179)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36cc13bee778ffb55b81e0c1448d02b4faad87cb",
"body": "…ening pass (#178)\n\n* docs(assets): replace near-black hero-demo.gif with legible watch-it-run.gif\n\nNew GIF: morning-triage arc 0:12-41.4 at 2x, chrome-cropped (1.27x effective\ntype scale), designed first frame held 1.2s (poster 47->0 band, no play glyph),\nend-freeze on the completed briefing. 148 f\n[…]\nce write-path tool' so the\n local-write tools (workflow_save, refresh_tokens) are not implied\n- docs/SETUP.md 'Hosted (Coming Soon)' was stale — hosted is live with a\n free tier; aligned with README",
"is_bot": false,
"headline": "docs(readme): poster hero restored + legible watch-it-run GIF + sharp…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:31:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eff0991e8317d48c9b3eb40a4b6ac906d6070f1f",
"body": "… broadening (#177)\n\n- demo-video: 6 chapter pills (data-t seek+play via one delegated listener,\n timeupdate active-state, teal active) — makes the README chapters claim true\n- client canon (shareNote/demoNote): drop the one client name claimed nowhere\n else, add the two CLI clients the README table already lists\n- share.html masthead: agent-neutral wording; tool phrasing aligned to 12/4/2/3\n- regenerated outputs committed alongside templates + lib",
"is_bot": false,
"headline": "feat(pages): demo-video chapter pills + client canon + share masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee014594566b4d0966d61d43476b7b0b2baef04a",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#175)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-23T03:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f9ed9469bdcb643eaca9365e49600be9f1c6ac9",
"body": "…urns 404 for this repo (verified in a real browser) (#174)",
"is_bot": false,
"headline": "docs(readme): star links point at repo root — the stargazers page ret…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T21:18:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4374f6acb87536ae713e4548bcd391edcb89adb",
"body": "…redesign (#173)\n\n- Centered masthead: title, tagline, badges + social-stars, kbd client-chip row, hook line with the honest verb (borrows).\n- Animated hero: 800px 2.4MB GIF cut from the full demo (unread census with live counts, tool call, morning briefing) grafted to the closing card (0 unreads / \n[…]\nll test. Centered anchor nav + centered star-CTA footer.\n- Repo description + topics updated out-of-band (free surface, no checker reads it).\n- Public-surface-integrity guard: all checks pass locally.",
"is_bot": false,
"headline": "docs(readme): centered masthead, animated hero, candor block, poster …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T20:50:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d7a0fbd29246cf9fe5728a2fabb9ad536073537a",
"body": "…ade hook, panache (#172)\n\n* docs(readme): deep rework for impact — consolidate duplicated per-client install blocks into one section, unify scattered pricing into a single hosted table, sharpen hero and section flow; all links, anchors, and substance preserved (460 to 391 lines)\n\n* docs(readme): pa\n[…]\nRestore the count literals the public-surface-integrity guard asserts (21 tools / 12 read-only / 4 write-path) that prior bold markup had split.\n- Local guard green: all 22 public-surface checks pass.",
"is_bot": false,
"headline": "docs(readme): deep rework — broaden scope past a single client, HN-gr…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T19:24:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ac3958218b44e176e20958fd58ad63a3820f533",
"body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump body-parser from 2.2.2 to 2.3.0 (#167)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T22:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d39d1a8af512a2e198b622133a1afa2c176f673",
"body": "Workspace profiles (SLACK_MCP_PROFILE / --profile, closes #164): every\nstorage surface — token file, metadata sidecar, write lock, Keychain\nservice — gets its own namespace so multiple server instances run\nside-by-side without sharing credentials. Fail-closed name validation;\nreported via storage.pr\n[…]\n a\ngenuine v10-encrypted cookie + LevelDB token log) driving the actual\nextraction pipeline, and profile-namespace isolation tests including\nCLI flag plumbing and fail-closed startup. Suite: 57 tests.",
"is_bot": false,
"headline": "v4.6.0: workspace profiles + Chrome extraction overhaul (#170)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T22:10:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a7efac3472b7fa4b07a8c0c7ea719655413d70d",
"body": "…-process write lock (#169)\n\nVersion bump across the four parity surfaces + CHANGELOG release entry.\nFeature content merged via #163 (closes #162).",
"is_bot": false,
"headline": "v4.5.0: keychain-only credential storage, fail-loud guarantees, cross…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8590b5ce8ff57610c8ae69d23b44389c32b20ab",
"body": "…#163)\n\nOpt-in keychain-only storage: credentials live exclusively in the macOS Keychain, no plaintext token file, verified writes, fail-loud plaintext removal, in-memory fallback for failed persists, cross-process write lock for sidecar metadata, hardened setup wizard and token CLI, storage-modes diagram. All adversarial-review findings addressed with regression tests (44 total).",
"is_bot": false,
"headline": "Keychain-only credential storage via SLACK_MCP_TOKEN_STORAGE (#162) (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab89508e1b490d310801b41a7e5504f82e5d45c7",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.26 to 4.12.31.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.26...v4.12.31)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.31\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.26 to 4.12.31 (#166)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc4f9f57d01867e10839bd0dabfdb71fd695913",
"body": "Bumps the actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-node in the actions group (#165)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:15:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc703e9bd1b5bb137b3793c2fbf987b0bce3fc95",
"body": "… (#158)",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T10:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e3c9abec2b4f7b2bd94459bf34f2e52ca823b33",
"body": "…x (#161)\n\nPush runs assert the page against live upstream truth; release-published runs (new trigger) assert strict convergence. Review follow-ups: optional chaining, numeric 401, unified response helper. Landing-page tile reads the v5 hosted status tools shape (fixed at the template source; local fixture now mirrors the live contract). Transitive ip-address overridden to a patched version (alert 20).",
"is_bot": false,
"headline": "Smoke two-invariants split + review follow-ups + cloud-health tile fi…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T12:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb8773455c59dee4bc40406ed2f07a7bcb9a231",
"body": "Detect Slack session-token death in both transports + health check and return recovery guidance (self-fix first, hosted second; throttled; SLACK_MCP_NO_UPSELL opt-out). Sweep every live public surface from the retired 9/mo tier to the live tiers: Free 2,000 req + 25 tool calls/mo; Pro 19/mo, 190/yr; Team 49/mo, 490/yr; Safeguard 199 waitlist. Version 4.4.3 across all four manifests.",
"is_bot": false,
"headline": "4.4.3 - Lifeboat token-death recovery + live market-tier pricing (#160)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T11:21:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6826459764b77254214e77dd10b11d9d72c535dc",
"body": "…#157)\n\nReleases now publish the MCP registry entry from CI via GitHub Actions OIDC, removing the interactive device-flow login. Guards: server.json/tag version parity, registry-existence skip (with explicit failure on lookup errors), and an npm propagation wait.",
"is_bot": false,
"headline": "ci(publish): publish to the MCP registry via GitHub OIDC on release (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd935040220ad3d3cb553026595a0bd9d79d6ae6",
"body": "…xtraction robustness (#156)\n\nChangelog entries for 4.4.1 and 4.4.2; version aligned across package.json, server.json, glama.json.",
"is_bot": false,
"headline": "release: 4.4.2 — transport dispatch parity, worker contracts, token e…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:08:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc7fcef137e3f976ec098674d66b3129e844a705",
"body": "…ess, page hardening (#155)\n\n* fix(content): purge remaining Q2-2026 rollout claims from live surfaces\n\nReplaces 'rolling out Q2 2026' with 'in development' in the live tool\npayload (lib/handlers.js), tool description (lib/tools.js), public-page\nsources (lib/public-pages.js, templates/public-pages/d\n[…]\nith\nhttps:// (falling back to the canonical docs URL). Fixed in the\ntemplate source and regenerated the derived index.html.\n\n* perf(worker): resolve unread-DM display names concurrently; tidy comments",
"is_bot": false,
"headline": "fix: tool dispatch parity, worker contracts, token extraction robustn…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T22:52:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e6e304a62954929860d7be4bacb9562cbeff6ad",
"body": "…ical description (#154)\n\nQ2 2026 is over: every shipped surface (package/server/glama descriptions, README x3, TROUBLESHOOTING, support-triage template) now says the morning catch-up DM is in development — same truth-pass as the hosted page. One canonical <=100-char description across package.json/server.json/glama.json (registry schema now enforces the cap; surface-integrity check enforces parity).",
"is_bot": false,
"headline": "fix(release): 4.4.1 — purge stale Q2-2026 rollout claims; unify canon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T21:17:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a6a079ba43cbd944a382aee1e61231152510c3d",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1)\n\n---\nupdated-d\n[…]\npe: version-update:semver-patch\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#153)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T10:34:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "607ce5db7d3c486213861f3321fda3c151827b1e",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.26)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.26\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.23 to 4.12.26 (#151)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52cfe94c4cb1840fa9f41a84dcb86703d9e1aa4",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:34:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b57674ebe6e7b3af1f4d9dc4963bb04108cdf47a",
"body": "Bumps node from 25-alpine to 26-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 26-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 25-alpine to 26-alpine (#131)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T16:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dd91d6651bce16aadbad8539233e8c0eaa5aaa8",
"body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.\n- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.1.0...v10.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: ip-address\n dependency-version: 10.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ip-address in /workers/browser-ops (#129)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T15:46:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fbdda94b6a20d7a3f2704370b733ee4e4d547bc",
"body": "…metadata orthogonality)",
"is_bot": false,
"headline": "test: add tool-schema test (rich-fields on 4 read tools; include_all_…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T15:24:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5279f7e2dcd2f68c711a52ca986ac2beacd7f147",
"body": "…LI install one-liner",
"is_bot": false,
"headline": "fix(lint): neutral ROADMAP wording; sync package-lock to 4.4.0; add C…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72e7aafe9c9c56dd5cc2ce999c3e89ecca2dc164",
"body": "…ields section",
"is_bot": false,
"headline": "docs: terse technical 4.4.0 changelog; before/after example in rich-f…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe7922c4933d823ad12dfe27ff1130c1a8a18e1",
"body": "….0 = update/delete message)",
"is_bot": false,
"headline": "docs: surface include_rich_message_fields in README; add ROADMAP (4.5…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7186f8fb95eeb4830090617be88d30f3895444d9",
"body": "…_fields), first unit tests; credit @rvandam (#143)",
"is_bot": false,
"headline": "release: cut 4.4.0 — rich message fields (opt-in include_rich_message…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bcddef52833a8375a0684eb33550f39346df2ae",
"body": "(A) The 'Validate release and issue templates' step grep'd the ENTIRE file when a\ncomms template (incl. CHANGELOG.md) changed. CHANGELOG.md has frozen historical\nrelease notes that legitimately name tool brands, so any commit touching it\nred-mained the branch on content nobody changed. Narrow the sc\n[…]\ng email on any non-fork event\n(e.g. a same-repo push) still fails closed.\n\nBanned-token regex byte-for-byte unchanged; per-commit message enforcement and the\nregression-check anchor strings untouched.",
"is_bot": false,
"headline": "Harden attribution guard: scan added lines only + legible fork-PR path",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bbbb5fa4921595c1ce567d85f8e7cecd135ff78",
"body": "Absorbs PR #143 by @rvandam: surface message content Slack stores outside\n`text` -- attachments, blocks, metadata, files, reactions -- behind an opt-in\n`include_rich_message_fields` flag, plus an `include_all_metadata` passthrough,\nacross conversations.history, get_full_conversation, search.messages\n[…]\nts (helper + tool-schema) and wire `npm test` into CI\n- credit @rvandam in CONTRIBUTORS and this commit; document the absorb-and-credit\n policy in CONTRIBUTING so the attribution check is no surprise",
"is_bot": false,
"headline": "Add opt-in rich Slack message fields (#143)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac13a0ae0539e0c8d97106e57bd64611a9fc87b4",
"body": "… (#145)\n\nBumps the actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.0.3` |\n| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |\n| [docker/\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beeaab0d1f6e24dc3ca02493f13287b6b39f8ef9",
"body": null,
"is_bot": false,
"headline": "Improve public site SEO and accessibility (#146)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-08T22:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "504ccfe2a9e19645234d92ab348dfa35fdf3fbeb",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.23\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.18 to 4.12.23 (#144)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-04T20:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aaf7a2f9bea43abcf2fad6ce5fd0c471e59c03fc",
"body": "…140)\n\nBumps [ws](https://github.com/websockets/ws) from 8.19.0 to 8.21.0.\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/8.19.0...8.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: ws\n dependency-version: 8.21.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ws from 8.19.0 to 8.21.0 in /workers/browser-ops (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-24T15:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fb20b2f69e14d73723a0511aa5ab7963f51d638",
"body": "Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.14.2...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n dependency-version: 6.15.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump qs from 6.14.2 to 6.15.2 (#139)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-23T19:27:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d01751e29a82d656b2caf1c17e41fee75797afe2",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.59.1 to 1.60.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:38:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33b0b2dfee8965ed14c58f8f8ba2115559cff489",
"body": null,
"is_bot": false,
"headline": "chore(changelog): backfill v4.2.0 through v4.3.0 compare links (#136)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fd4ca3f61e8f52810145a4f8748ab4de787c001",
"body": "…nt (#135)\n\n- New `--refresh-tokens` CLI flag (src/cli.js, 4 lines) maps to\n scripts/token-cli.js auto, enabling `npx -y @jtalk22/slack-mcp\n --refresh-tokens` as a clean one-line LaunchAgent invocation.\n- docs/SETUP.md: new \"Keep Tokens Fresh\" section with a macOS\n LaunchAgent template that runs \n[…]\nd 4.2.2 -> 4.3.0.\n- SETUP troubleshooting: \"Verify path to server.js\" -> \"Verify\n JSON syntax in your client's MCP config\" (npx-canonical).\n- .gitignore: three local-only release/sync helper scripts.",
"is_bot": false,
"headline": "v4.3.0: --refresh-tokens flag + LaunchAgent docs + tool-count alignme…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T19:01:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23b2f5230d78b0fcd23a8c7a00742377ccad7418",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#134)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-09T02:34:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92e53f3c89ab64b40df94d8e1d883f14f9f3db27",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.14 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.14...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.18\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.14 to 4.12.18 (#133)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T15:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "094308d4796eecda851840ae290ffbfe7638b264",
"body": "…ps (#132)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.3.0 to 5.3.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.3.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T12:46:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c88aef68ea822028b7893ff3bf2f4c9bbfcdf6e6",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.7 to 1.1.0\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-minor\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#128)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-02T13:01:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fda6532f67e7f7eb5a09c5e8383a5c7bbaf80d8f",
"body": "User flagged the README diagram's Step 3 box as the \"session token thing\nthat needs polishing.\" Two issues addressed:\n\n1. \"Full Access\" headline + tiny \"SESSION TOKEN\" sub-badge was awkward.\n The badge was 74×16px at font-size 8 — the artifact name was visually\n subordinate to a generic \"Full Ac\n[…]\nd).\nREADME.md is in the package but its text doesn't change. GitHub\nrewrites relative image paths to raw.github.com when rendering on\nnpmjs.com, so the polish is visible there too without a republish.",
"is_bot": false,
"headline": "docs(diagram): polish session-token framing + remove dead text (#127)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:33:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75f584b761a06f18c17f066f122e0f7b1d71ee4c",
"body": "…126)\n\nAgentScore advisory AGENTSCORE-2026-0016 flagged v4.2.0 for `command_injection: shell execution with template literal input` (90→80, LOW→MODERATE). Static-analysis false positive — both flagged sites use hardcoded internal constants (KEYCHAIN_SERVICE = \"slack-mcp-server\" in lib/token-store.js\n[…]\n across package.json, server.json (top-level + packages[0].version), glama.json. package-lock.json regenerated.\n\nCompanion: AgentScore re-scan should restore LOW after publish.yml fires on v4.2.2 tag.",
"is_bot": false,
"headline": "v4.2.2: harden shell-exec surface — argv arrays + native chmodSync (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:08:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4e0e59fc47c798a8e34a5f048c67e48617ef08d",
"body": "…rewrite (#125)\n\n* v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff rewrite\n\nTwo real honesty drifts surfaced post-v4.2.0 publish:\n\n1. npm registry hard-truncated `description` at 255 chars on publish.\n Local was 264 ending \"…rolling out Q2 2026).\" → registry-stored copy\n was\n[…]\nls (4th tool was the morning DM, which isn't a\ntool, it's a scheduled job — same caveat that drove this whole sprint).\n\n* fix(lockfile): regen package-lock.json for 4.2.1 — ci public-surface-integrity",
"is_bot": false,
"headline": "v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:01:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2883da4b0737a3102f041d9167208df6c47392cb",
"body": "…esty caveat (#124)\n\nDrafts release notes modeled on RELEASE-NOTES-v4.1.2.md structure:\nworkflow primitives, workflow_kind taxonomy, 6 templates, 3 hosted\nupgrade stubs, v5 hosted pricing, explicit \"Stream C morning-DM rolls\nout in v4.3.0 (Q2 2026)\" note.\n\nAdds \"(rolling out Q2 2026)\" caveat to ever\n[…]\n Pro at \\$9\nper month unlocks unlimited tooling, permanent OAuth, 90-day\nVectorize, 2 workspaces.\n\nSmoke regex still matches because the phrase is preserved verbatim --\nonly the caveat is added after.",
"is_bot": false,
"headline": "docs(v4.2.0): publish prep — RELEASE-NOTES-v4.2.0.md + morning-DM hon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T15:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6af1a03d745a7685ef3ca477c2d7747f2c087cb9",
"body": "…h (#123)\n\nv4.2.0 release: workflow profile primitives, paid hosted stubs, 6 prebuilt templates, visual polish.\n\nHighlights:\n- 21 tools (12 read-only Slack + 4 write-path + 2 workflow profile primitives + 3 hosted upgrade stubs)\n- workflow_kind taxonomy: incident_room, exec_brief, support_inbox, pro\n[…]\nase-preflight env mirror CI's ALLOW_GITHUB_WEB_COMMITTER=1\n\nVerified: 7/7 CI checks green. npm pack: 33 files, 83 kB, version 4.2.0. npm publish to @latest is a separate step (release: created event).",
"is_bot": false,
"headline": "v4.2.0: workflow primitives + paid stubs + 6 templates + visual polis…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-25T21:22:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2cb361fcc937e2affb677424b8a314b02534cba",
"body": "… (#109)\n\nBumps the npm-all group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [express](https://github.com/expressjs/express) and [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `@modelcontextprotocol/sdk` f\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the npm-all group across 1 directory with 3 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34cdb27b94aa3e92340a30582c79b115a52a0634",
"body": "… (#122)\n\nBumps the actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](ht\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 4 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:45:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b285a2b9ce23556cea4cc3f052810957ed38d5a1",
"body": "…ps (#119)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.2 to 5.3.0.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.2 to 5.3.0 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b50bf4e674cf7948284bb0293250e4a39b3c837f",
"body": "* v4.1.1: error surface hardening + auto-heal telemetry\n\nClose the signal-path gap from \"background auto-heal failed\" to\n\"user sees actionable next_action\". A 12-day stale token file\npreviously surfaced a generic tool_call_failed with no route to fix.\n\n- token-store: getStoredTokens passes telemetry\n[…]\nns. The ripgrep path was correct but the GitHub runner does not\npreinstall ripgrep, so the looser fallback was actually the active CI path.\nBoth paths now honor word boundaries and behave identically.",
"is_bot": false,
"headline": "v4.1.2: leveldb token extraction + multi-profile + zombie fix (#117)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-24T15:36:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72e795327ce0b68bc7dcbb55a57112d36b19b0ac",
"body": "Governance files installed per /tmp/repo-audit/phase4/:\n- - dependabot.yml existing (pre-audit), PRESERVED\n - auto-merge.yml existing (different), PRESERVED\n - CODEOWNERS NEW\n - REPO.md written\n\nSee revereveal/.github for org-level governance docs (REPO-standard,\nbranch-naming-convention, archival-policy, anti-recommendations).\n\nGenerated by repo-audit-2026-04-18 sweep.",
"is_bot": false,
"headline": "chore(audit-2026-04-18): install governance baseline (#120)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-18T16:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26a7c918512b893f0b14706ad51bc859fa21f3ed",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.14\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.12 to 4.12.14 (#118)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T03:04:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15adeecef3d2badec54cc75dd0d8ee128e4f6719",
"body": "…ps (#116)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.1 to 5.2.2.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T21:42:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f8faba24d89b730118000d4150202db4899748d",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.6 to 1.0.7\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-patch\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#114)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T10:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9cedd091b36524069c82ecba9480fabf2cf23dc9",
"body": "…ps (#113)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.0 to 5.2.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T20:59:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfb2a515e65e29ee8dc631975fe358a4ee14ff34",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.7 to 4.12.12.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.7...v4.12.12)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.12\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.7 to 4.12.12 (#112)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T06:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05ba6ca32de443847c5abbfd06f4d1ce5557b64b",
"body": "Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.11 to 1.19.13.\n- [Release notes](https://github.com/honojs/node-server/releases)\n- [Commits](https://github.com/honojs/node-server/compare/v1.19.11...v1.19.13)\n\n---\nupdated-dependencies:\n- dependency-name: \"@hono/node-server\"\n dependency-version: 1.19.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 (#111)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T04:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "745a2f1bad946b915220c69c5f4722e09e93012d",
"body": "* fix: regenerate poster with subtle bottom-left play button\n\nOld poster had large centered opaque play button blocking hook text.\nNew: 44px, 35% opacity, bottom-left with backdrop blur.\n\n* copy: new demo tagline — jammed printer, quit six months ago, still in #facilities\n\n* copy: quit -> left",
"is_bot": false,
"headline": "fix: subtle bottom-left play button on README poster (#107)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T23:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9945493bdd8db713e0aba8a519386121a90649b",
"body": "* fix: extract HttpOnly session cookie from Chrome encrypted DB\n\nSlack now marks the d session cookie as HttpOnly, which means\ndocument.cookie cannot access it. This broke token extraction for\nall users on all platforms.\n\nFix: Read Chrome SQLite cookie database directly, decrypt using\nthe Chrome Saf\n[…]\ne now shows 'Hosted docs'.\n\n* fix: sync package-lock version to 4.1.0 + update smoke test assertions\n\npackage-lock.json was stuck at 4.0.0.\nBrowser smoke assertions updated to match current page copy.",
"is_bot": false,
"headline": "v4.1.0: Chrome DB decryption, stealth mode, video polish (#106)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T15:45:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "314b8f3c890e747ee80e912687564cd12472250f",
"body": null,
"is_bot": false,
"headline": "docs: rewrite show hn post with full shipped scope (#105)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36caf93640a11ebe63d3d1a078ca0f0bdd43a845",
"body": null,
"is_bot": false,
"headline": "docs: fresh video, poster, and screenshots (#104)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:23:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "636f1a0bff09ca261b88b6c4f38e5105ca2f558c",
"body": "… (#103)",
"is_bot": false,
"headline": "ux: one-liner token extractor in setup wizard, sequential png capture…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "458eed0489ae9245db1ac4dae7b946bd72a2a50e",
"body": "… play button fix (#102)",
"is_bot": false,
"headline": "feat: bookmarklet extractor, multi-client configs, hq video pipeline,…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56455fa8723d6ab8741efd38599eebbc8f45baff",
"body": "…le, smoke fix (#101)",
"is_bot": false,
"headline": "traction: landing page hero, npm discovery, changelog, comparison tab…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4caa3f2c058c0fc13855977ec39da7c4daa92854",
"body": null,
"is_bot": false,
"headline": "docs: fresh assets with h264 video and play button poster (#100)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T22:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "833884db567979b957396e6030aa02012efacc06",
"body": null,
"is_bot": false,
"headline": "polish: h264 video, play button poster, css fixes, schema.org (#99)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T16:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2176e66c6ff57f8c5907d48c0e1e92a7e540acb0",
"body": "Sets speed to 0.5x before autoplay so title card stays visible for 6 real seconds. Screenshot captures at 4s with full stagger animation complete and 2s buffer before card disappears.",
"is_bot": false,
"headline": "fix: poster captures title card at 0.5x speed (#97)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:47:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea95daac25276684d1ce398313f42cd8310ab214",
"body": "…(#96)\n\nLanding page: updated copy and OG tags, streamlined CTAs, accent color matches demo. Contributing guide expanded. README demo link fixed. Social preview 2x DPI. Mobile clip starts from title card. Deleted .coderabbit.yaml. Template synced.",
"is_bot": false,
"headline": "polish: landing page, title card poster, contributing guide, quality …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aae0eb6867f6b86e44130bb164bdb93569776563",
"body": "…#93)\n\nDiagram SVG redesigned to match demo palette (orange/grey instead of red/teal). Poster captures first tool result (unreads list visible) instead of empty chat. README adds play link and printer PIN reference. Social preview and mobile clip regenerated from Monday Morning video.",
"is_bot": false,
"headline": "docs: diagram redesign, poster shows tool results, refreshed assets (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T14:08:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b1e4ad7f8cca0fc1df3ead50d9e799be10dc5d5",
"body": "Fresh Monday Morning demo video (9MB) and screenshots recorded on M4 Max with the 7-scenario narrative.",
"is_bot": false,
"headline": "docs: fresh Monday Morning demo video and screenshots (#92)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:47:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc095209f9b4bd01a750bfd0e5b4311a480688fd",
"body": "…y, fresh video + repo cleanup (#91)",
"is_bot": false,
"headline": "docs: Monday Morning demo — 7 narrative scenarios, printer PIN myster…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:06:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9c096f77ab3ddfb5d41bf31c9f10fb9e5ccd3d",
"body": "* docs: fresh demo assets recorded on M4 Max\n\n* docs: fresh demo assets recorded on M4 Max",
"is_bot": false,
"headline": "docs: fresh demo assets from M4 Max (#89)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T10:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a23f55f3b8006ec138b15978f7b3f70f9ad37bef",
"body": "* docs: v4.0.0 demo improvements, CI fixes, health endpoint, OG tags, README poster\n\n* chore: self-host fonts for consistent rendering",
"is_bot": false,
"headline": "docs: v4.0.0 demo — fresh assets, viral embed tags (#87)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T09:42:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d68038ef91c3ab47ae910ebc2a4dd21f5aa8ee",
"body": "- Rewrite README: pain-first opener, inline install, demo GIF, OAuth diagram\n- Add v4.0.0 CHANGELOG, SECURITY.md update, release notes\n- Update Cloudflare worker to v4.0.0 with 16 tools\n- Fix browser-smoke assertions for v4.0.0 page content\n- Clean attribution markers from CHANGELOG",
"is_bot": false,
"headline": "release: v4.0.0 preparation (#84)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T04:37:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "499ea096c350d3e9888078f2e859cf04659ab8eb",
"body": "- public-metadata.js: 107 → 22 lines, removed UTM tracking and pricing\n- public-pages.js: removed sales funnel, simplified to product links\n- package.json: removed dead scripts for deleted tools\n- check-public-surface-integrity.js: simplified for v4.0\n- check-version-parity.js: fixed output path\n- Regenerated all public HTML pages",
"is_bot": false,
"headline": "chore: strip commercial tracking URLs and simplify public pages (#82)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f6b99cb66a1616a834ffcb114324823b72d452c",
"body": "* fix: use fs.chmodSync and add input bounds\n\nReplace execSync shell calls with fs.chmodSync for file permissions.\nRedact full API key from web server console output.\nAdd safeParseInt helper with radix and upper bounds for query params.\n\n* chore: remove internal ops docs\n\nRemove commercial surface m\n[…]\nity.js to stop reading deleted\nfiles (distribution ledger, launch ops). Replace stale version\nchecks with core documentation link validation.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify repo: remove ops docs and automation scripts (#81)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:02:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d9b1e593bf63fd497ae59cc801946ec08ba6c995",
"body": "Bumps and [path-to-regexp](https://github.com/pillarjs/path-to-regexp). These dependencies needed to be updated together.\n\nUpdates `path-to-regexp` from 8.3.0 to 8.4.0\n- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)\n- [Changelog](https://github.com/pillarjs/path-to-regexp/blo\n[…]\nxp\n dependency-version: 0.1.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump path-to-regexp (#80)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-30T01:54:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e06d10a68e56b0f6c3881a1bf2a74d78afc1278a",
"body": "Bumps the actions group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` |\n| [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.3.0` |\n| [dependabot/fetch-metadata](https://github.com/de\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 6 updates (#76)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:04:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782910c056e4706ab0593ee97101c4bd07b45825",
"body": "Bumps node from 22-alpine to 25-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 25-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 22-alpine to 25-alpine (#79)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9faf01daabb79c97973439c599f9aa4c10de3750",
"body": null,
"is_bot": false,
"headline": "chore(server): tighten proof and dependabot hygiene (#78)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-20T00:39:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 36,
"commits_last_year": 306,
"latest_release_at": "2026-07-21T22:11:03Z",
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 26,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@jtalk22/slack-mcp",
"exists": true,
"license": "MIT",
"keywords": [
"claude",
"mcp",
"model-context-protocol",
"slack",
"slack-api",
"claude-desktop",
"cli",
"developer-tools",
"mcp-server",
"session-based",
"claude-code",
"gemini-cli",
"local-first",
"remote-mcp",
"session-mirroring",
"slack-mcp",
"secure-by-default",
"llm",
"slack-integration",
"ai-agents",
"automation",
"productivity",
"oauth-free",
"no-admin-approval",
"cursor",
"copilot",
"windsurf",
"codex-cli",
"stealth-mode"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@jtalk22/slack-mcp",
"is_deprecated": false,
"latest_version": "4.6.0",
"repository_url": "https://github.com/jtalk22/slack-mcp-server",
"versions_count": 41,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4736,
"first_published_at": "2026-01-03T20:26:39.283000Z",
"latest_published_at": "2026-07-21T22:11:23.724000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 20,
"stars": 29,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-11",
"count": 1
},
{
"date": "2026-01-17",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-07-14",
"count": 2
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 20,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 95,
"malicious_count": 0,
"assessed_package": "npm:@jtalk22/slack-mcp@4.6.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.27.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "@cloudflare/puppeteer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.13",
"ecosystem": "npm"
},
{
"name": "@puppeteer/browsers",
"direct": false,
"version": "2.2.4",
"ecosystem": "npm"
},
{
"name": "@tootallnate/quickjs-emscripten",
"direct": false,
"version": "0.23.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "25.4.0",
"ecosystem": "npm"
},
{
"name": "@types/yauzl",
"direct": false,
"version": "2.10.3",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.18.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ast-types",
"direct": false,
"version": "0.13.4",
"ecosystem": "npm"
},
{
"name": "b4a",
"direct": false,
"version": "1.8.0",
"ecosystem": "npm"
},
{
"name": "bare-events",
"direct": false,
"version": "2.8.2",
"ecosystem": "npm"
},
{
"name": "bare-fs",
"direct": false,
"version": "4.5.5",
"ecosystem": "npm"
},
{
"name": "bare-os",
"direct": false,
"version": "3.7.1",
"ecosystem": "npm"
},
{
"name": "bare-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "bare-stream",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "bare-url",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "basic-ftp",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "buffer-crc32",
"direct": false,
"version": "0.2.13",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.5",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "data-uri-to-buffer",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "degenerator",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "devtools-protocol",
"direct": false,
"version": "0.0.1299070",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escodegen",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "events-universal",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.6",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.3.1",
"ecosystem": "npm"
},
{
"name": "extract-zip",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-fifo",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "fd-slicer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "get-uri",
"direct": false,
"version": "6.0.5",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.31",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.1.3",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "7.18.3",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "netmask",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "pac-proxy-agent",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "pac-resolver",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "pend",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "progress",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "proxy-agent",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "proxy-from-env",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.2",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.4",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "smart-buffer",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "socks",
"direct": false,
"version": "2.8.7",
"ecosystem": "npm"
},
{
"name": "socks-proxy-agent",
"direct": false,
"version": "8.0.5",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "streamx",
"direct": false,
"version": "2.23.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "3.1.8",
"ecosystem": "npm"
},
{
"name": "teex",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "text-decoder",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "through",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "unbzip2-stream",
"direct": false,
"version": "1.4.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "7.18.2",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.21.0",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.2",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "yauzl",
"direct": false,
"version": "2.10.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": false,
"version": "4.3.4",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.1",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 171,
"direct_count": 2,
"indirect_count": 169
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 164,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 7,
"closed_unmerged_prs": 21
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "jtalk22",
"commits": 269,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
},
{
"type": "User",
"login": "bryanmwood",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/171692620?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ai-review-noise-guard.yml",
"attribution-guardrail.yml",
"ci.yml",
"claude.yml",
"dependabot-auto-merge.yml",
"docker-publish.yml",
"live-browser-smoke.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/25 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 9,
"reason": "dependency not pinned by hash detected -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"ran_at": "2026-07-30T17:27:47Z",
"aggregate_score": 6.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T16:48:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T16:47:42Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jtalk22/slack-mcp-server",
"host": "github.com",
"name": "slack-mcp-server",
"owner": "jtalk22"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 70,
"vitality": 89,
"community": 56,
"governance": 51,
"calibration": "2026-08-02",
"engineering": 81,
"ai_readiness": 57,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 306,
"human_commit_share": 0.68,
"days_since_last_push": 2,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "306 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 306
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 36,
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "36 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 36
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 20,
"stars": 29,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4736
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,736 downloads/month across npm",
"points": 49,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4736,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 79,
"inputs": {
"merged_prs": 164,
"open_issues": 0,
"closed_issues": 7,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 21,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "164/185 decided PRs merged",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 164,
"decided": 185
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "jtalk22",
"public_repos": 2,
"account_age_days": 1085
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of jtalk22",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "jtalk22"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~2 yr old",
"points": 9.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "41 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 41
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 81,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://mcp.revasserlabs.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 70,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@jtalk22/slack-mcp@4.6.0 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@jtalk22/slack-mcp@4.6.0",
"assessed": 95
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 95,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 95,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "68 of 68 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 68,
"sampled": 68
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.32
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "32 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 32,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 9,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/44 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 44,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"mcp-server",
"library",
"network-service"
],
"scores": {
"cli": 2,
"library": 6,
"mcp-server": 9,
"network-service": 4
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:@modelcontextprotocol/sdk",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
},
{
"tier": "tags",
"label": "mcp-server",
"source": "tag:mcp-server",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:28:08.196642Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jtalk22/slack-mcp-server.svg",
"full_name": "jtalk22/slack-mcp-server",
"license_state": "standard",
"license_spdx": "MIT"
}
Verwandte Einträge
Geprüfte Repositories, die Katalog-Tags oder Ökosysteme mit jtalk22/slack-mcp-server teilen. Nebeneinander lesen →
Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
