jtalk22/slack-mcp-server tiene un índice de salud de 81 sobre 100, lo que lo sitúa en la banda Excelente. Su puntuación más alta es Vitality (89/100) y la más baja, Sustainability & Governance (51/100). Se actualizó por última vez hace 2 días. Una sola persona concentra la mayor parte del trabajo reciente.
81
global / 100
Excelente
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
81
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 69 se calibra a 81 en la escala publicada del índice (calibración del registro 2026-08-02).
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
95
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de npm:@jtalk22/slack-mcp@4.6.0 —lo que arrastra la instalación del paquete publicado—: 95 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 20 ⇿
0Estrellas
20Forks
32Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 3Menor 9Parche 20
OpenSSF Scorecard 6.2 / 10
6.2agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-30 17:27 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 2 paquetes directos y 169 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
npm
@modelcontextprotocol/sdk
1.29.0
directa
npm
express
5.2.1
directa
npm
@cloudflare/puppeteer
1.1.0
indirecta
npm
@hono/node-server
1.19.13
indirecta
npm
@puppeteer/browsers
2.2.4
indirecta
npm
@tootallnate/quickjs-emscripten
0.23.0
indirecta
npm
@types/node
25.4.0
indirecta
npm
@types/yauzl
2.10.3
indirecta
npm
accepts
2.0.0
indirecta
npm
agent-base
7.1.4
indirecta
npm
ajv
8.18.0
indirecta
npm
ajv-formats
3.0.1
indirecta
npm
ansi-regex
5.0.1
indirecta
npm
ansi-styles
4.3.0
indirecta
npm
ast-types
0.13.4
indirecta
npm
b4a
1.8.0
indirecta
npm
bare-events
2.8.2
indirecta
npm
bare-fs
4.5.5
indirecta
npm
bare-os
3.7.1
indirecta
npm
bare-path
3.0.0
indirecta
npm
bare-stream
2.8.1
indirecta
npm
bare-url
2.3.2
indirecta
npm
base64-js
1.5.1
indirecta
npm
basic-ftp
5.3.1
indirecta
npm
body-parser
2.3.0
indirecta
npm
buffer
5.7.1
indirecta
npm
buffer-crc32
0.2.13
indirecta
npm
bytes
3.1.2
indirecta
npm
call-bind-apply-helpers
1.0.2
indirecta
npm
call-bound
1.0.4
indirecta
npm
cliui
8.0.1
indirecta
npm
color-convert
2.0.1
indirecta
npm
color-name
1.1.4
indirecta
npm
content-disposition
1.1.0
indirecta
npm
content-type
1.0.5
indirecta
npm
content-type
2.0.0
indirecta
npm
cookie
0.7.2
indirecta
npm
cookie-signature
1.2.2
indirecta
npm
cors
2.8.5
indirecta
npm
cross-spawn
7.0.6
indirecta
npm
data-uri-to-buffer
6.0.2
indirecta
npm
debug
4.4.3
indirecta
npm
degenerator
5.0.1
indirecta
npm
depd
2.0.0
indirecta
npm
devtools-protocol
0.0.1299070
indirecta
npm
dunder-proto
1.0.1
indirecta
npm
ee-first
1.1.1
indirecta
npm
emoji-regex
8.0.0
indirecta
npm
encodeurl
2.0.0
indirecta
npm
end-of-stream
1.4.5
indirecta
npm
es-define-property
1.0.1
indirecta
npm
es-errors
1.3.0
indirecta
npm
es-object-atoms
1.1.1
indirecta
npm
escalade
3.2.0
indirecta
npm
escape-html
1.0.3
indirecta
npm
escodegen
2.1.0
indirecta
npm
esprima
4.0.1
indirecta
npm
estraverse
5.3.0
indirecta
npm
esutils
2.0.3
indirecta
npm
etag
1.8.1
indirecta
npm
events-universal
1.0.1
indirecta
npm
eventsource
3.0.7
indirecta
npm
eventsource-parser
3.0.6
indirecta
npm
express-rate-limit
8.3.1
indirecta
npm
extract-zip
2.0.1
indirecta
npm
fast-deep-equal
3.1.3
indirecta
npm
fast-fifo
1.3.2
indirecta
npm
fast-uri
3.1.4
indirecta
npm
fd-slicer
1.1.0
indirecta
npm
finalhandler
2.1.1
indirecta
npm
forwarded
0.2.0
indirecta
npm
fresh
2.0.0
indirecta
npm
fsevents
2.3.2
indirecta
npm
function-bind
1.1.2
indirecta
npm
get-caller-file
2.0.5
indirecta
npm
get-intrinsic
1.3.0
indirecta
npm
get-proto
1.0.1
indirecta
npm
get-stream
5.2.0
indirecta
npm
get-uri
6.0.5
indirecta
npm
gopd
1.2.0
indirecta
npm
has-symbols
1.1.0
indirecta
npm
hasown
2.0.2
indirecta
npm
hono
4.12.31
indirecta
npm
http-errors
2.0.1
indirecta
npm
http-proxy-agent
7.0.2
indirecta
npm
https-proxy-agent
7.0.6
indirecta
npm
iconv-lite
0.7.2
indirecta
npm
ieee754
1.2.1
indirecta
npm
inherits
2.0.4
indirecta
npm
ip-address
10.2.0
indirecta
npm
ipaddr.js
1.9.1
indirecta
npm
is-fullwidth-code-point
3.0.0
indirecta
npm
is-promise
4.0.0
indirecta
npm
isexe
2.0.0
indirecta
npm
jose
6.1.3
indirecta
npm
json-schema-traverse
1.0.0
indirecta
npm
json-schema-typed
8.0.2
indirecta
npm
lru-cache
7.18.3
indirecta
npm
math-intrinsics
1.1.0
indirecta
npm
media-typer
1.1.0
indirecta
npm
merge-descriptors
2.0.0
indirecta
npm
mime-db
1.54.0
indirecta
npm
mime-types
3.0.2
indirecta
npm
ms
2.1.3
indirecta
npm
negotiator
1.0.0
indirecta
npm
netmask
2.0.2
indirecta
npm
object-assign
4.1.1
indirecta
npm
object-inspect
1.13.4
indirecta
npm
on-finished
2.4.1
indirecta
npm
once
1.4.0
indirecta
npm
pac-proxy-agent
7.2.0
indirecta
npm
pac-resolver
7.0.1
indirecta
npm
parseurl
1.3.3
indirecta
npm
path-key
3.1.1
indirecta
npm
path-to-regexp
8.4.0
indirecta
npm
pend
1.2.0
indirecta
npm
pkce-challenge
5.0.1
indirecta
npm
playwright
1.61.1
indirecta
npm
playwright-core
1.61.1
indirecta
npm
progress
2.0.3
indirecta
npm
proxy-addr
2.0.7
indirecta
npm
proxy-agent
6.5.0
indirecta
npm
proxy-from-env
1.1.0
indirecta
npm
pump
3.0.4
indirecta
npm
qs
6.15.2
indirecta
npm
range-parser
1.2.1
indirecta
npm
raw-body
3.0.2
indirecta
npm
require-directory
2.1.1
indirecta
npm
require-from-string
2.0.2
indirecta
npm
router
2.2.0
indirecta
npm
safer-buffer
2.1.2
indirecta
npm
semver
7.7.4
indirecta
npm
send
1.2.1
indirecta
npm
serve-static
2.2.1
indirecta
npm
setprototypeof
1.2.0
indirecta
npm
shebang-command
2.0.0
indirecta
npm
shebang-regex
3.0.0
indirecta
npm
side-channel
1.1.0
indirecta
npm
side-channel-list
1.0.0
indirecta
npm
side-channel-map
1.0.1
indirecta
npm
side-channel-weakmap
1.0.2
indirecta
npm
smart-buffer
4.2.0
indirecta
npm
socks
2.8.7
indirecta
npm
socks-proxy-agent
8.0.5
indirecta
npm
source-map
0.6.1
indirecta
npm
statuses
2.0.2
indirecta
npm
streamx
2.23.0
indirecta
npm
string-width
4.2.3
indirecta
npm
strip-ansi
6.0.1
indirecta
npm
tar-fs
3.1.2
indirecta
npm
tar-stream
3.1.8
indirecta
npm
teex
1.0.1
indirecta
npm
text-decoder
1.2.7
indirecta
npm
through
2.3.8
indirecta
npm
toidentifier
1.0.1
indirecta
npm
tslib
2.8.1
indirecta
npm
type-is
2.1.0
indirecta
npm
unbzip2-stream
1.4.3
indirecta
npm
undici-types
7.18.2
indirecta
npm
unpipe
1.0.0
indirecta
npm
vary
1.1.2
indirecta
npm
which
2.0.2
indirecta
npm
wrap-ansi
7.0.0
indirecta
npm
wrappy
1.0.2
indirecta
npm
ws
8.21.0
indirecta
npm
y18n
5.0.8
indirecta
npm
yargs
17.7.2
indirecta
npm
yargs-parser
21.1.1
indirecta
npm
yauzl
2.10.0
indirecta
npm
zod
4.3.4
indirecta
npm
zod-to-json-schema
3.25.1
indirecta
Avisos de dependencias 0
Instalar npm:@jtalk22/slack-mcp@4.6.0 arrastra 95 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"is_fork": false,
"size_kb": 128141,
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"languages": {
"Shell": 9922,
"Dockerfile": 1486,
"JavaScript": 374396,
"Go Template": 152008
},
"pushed_at": "2026-07-28T16:47:42Z",
"created_at": "2026-01-03T19:19:56Z",
"owner_type": "User",
"updated_at": "2026-07-28T16:48:41Z",
"description": "Slack for your AI agent — session tokens, not OAuth. No app to register, no admin approval. Works with any MCP client. 21 tools.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"Go Template"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "jtalk22",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4",
"created_at": "2023-08-10T05:59:22Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1085
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.6.0",
"kind": "minor",
"published_at": "2026-07-21T22:11:03Z"
},
{
"tag": "v4.5.0",
"kind": "minor",
"published_at": "2026-07-21T21:53:40Z"
},
{
"tag": "v4.4.3",
"kind": "patch",
"published_at": "2026-07-03T12:01:20Z"
},
{
"tag": "v4.4.2",
"kind": "patch",
"published_at": "2026-07-02T23:39:53Z"
},
{
"tag": "v4.4.1",
"kind": "patch",
"published_at": "2026-07-02T23:39:34Z"
},
{
"tag": "v4.4.0",
"kind": "minor",
"published_at": "2026-06-09T14:45:43Z"
},
{
"tag": "v4.3.0",
"kind": "minor",
"published_at": "2026-05-12T19:02:16Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2026-04-26T16:08:51Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2026-04-26T16:02:21Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2026-04-26T15:44:44Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2026-03-31T15:46:31Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2026-03-30T04:46:04Z"
},
{
"tag": "v3.2.5",
"kind": "patch",
"published_at": "2026-03-12T00:25:26Z"
},
{
"tag": "v3.2.4",
"kind": "patch",
"published_at": "2026-03-11T02:11:17Z"
},
{
"tag": "v3.2.3",
"kind": "patch",
"published_at": "2026-03-11T00:21:01Z"
},
{
"tag": "v3.2.2",
"kind": "patch",
"published_at": "2026-03-10T19:26:55Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-03-10T14:40:27Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-03-10T14:11:44Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-02-28T04:08:08Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-26T12:49:41Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-02-26T10:35:38Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-02-25T05:53:00Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-02-25T05:31:17Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-02-24T14:28:58Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-01-22T17:36:37Z"
},
{
"tag": "v1.1.9",
"kind": "patch",
"published_at": "2026-01-09T00:55:04Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2026-01-09T00:36:28Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2026-01-08T23:09:54Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2026-01-08T20:33:13Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2026-01-08T20:04:52Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2026-01-08T13:45:12Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-08T13:34:37Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-01-03T21:29:23Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-01-03T21:17:05Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-01-03T21:14:46Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-01-03T19:30:22Z"
}
],
"recent_commits": [
{
"oid": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"body": "The hosted section listed three inference tools (smart_search, catch_me_up,\ntriage) — the three that ship in this package as upgrade stubs. The hosted\nbrain actually runs a fourth, slack_workflow_brief, which renders a saved\nworkflow profile into a contract-validated brief and has no OSS stub.\n\nNaming it keeps the OSS and hosted surfaces telling the same story. The\ntool table is unchanged: this package still ships exactly 21 tools.",
"is_bot": false,
"headline": "docs(readme): name the hosted brain fourth inference tool (#195)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T16:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "640b9628a4ff7eac4f2a5612c43693143d525eb0",
"body": "Naming another server in our own README introduces a competitor most\nreaders never knew existed — free publicity handed to a larger repo, and\nself-defeating on a page whose job is to win the reader. The differentiators\nthat block carried (automatic Chrome extraction, managed hosted OAuth,\nkeychain-o\n[…]\n in their own sections, so\nnothing substantive is lost. The How-the-Chrome-extraction-works section\nstays — that stands entirely on its own.\n\nGates: language, public-surface-integrity, drift all pass.",
"is_bot": false,
"headline": "docs(readme): remove the competitor-comparison block (#194)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T13:05:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bde8aebd43c6a0003e6b425323cc6617e3ad1e4d",
"body": "…internals (#193)\n\nTwo positioning gaps a Show HN thread surfaces in its first comments:\n\n1. korotovsky/slack-mcp-server (the established Go server with the same\n session-token approach) was never mentioned. Added an honest candor\n <details> that credits its breadth (Apps, GovSlack, Group DMs) a\n[…]\nChrome exact\n PBKDF2 then AES-128-CBC v10 scheme, linking the readable lib/token-store.js.\n\nNo tool/count changes. Banned-language, public-surface-integrity, and\ngenerated-page drift gates all pass.",
"is_bot": false,
"headline": "docs(readme): address the incumbent + document the Chrome-extraction …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:51:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5b105501b7b23c8846c70ca4594d41404febff",
"body": "Both demo wrapper pages still carried the old navy palette while the poster,\nREADME hero, and recorded demo set had moved to the near-black / coral / teal\ntriad. This aligns them.\n\n- demo-video.html: near-black ground with faint coral (left) + teal (right)\n corner glows, replacing the navy gradient\n[…]\nzed to the brand muted token.\n\nRegenerated public/* from templates. Drift, banned-language, and\npublic-surface-integrity gates all pass. Renders verified at desktop 1440\nand mobile 390 for both pages.",
"is_bot": false,
"headline": "style(demo-pages): brand-align demo wrappers to poster canon (#192)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:46:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53a4a5b42e1722b9d4d19a1a69c6f04665d05729",
"body": "… (#191)\n\nRoot cause (confirmed via live computed styles + a known-good repo): GitHub\nrenders images inside an align=center container as display:block, so every\nbadge took its own line no matter the syntax (raw HTML, single-line, or\nmarkdown all stacked). Markdown badges OUTSIDE any align wrapper render inline\nand flow — the pattern Hono and many top repos use. Moved the five badges to a\nplain markdown row above the centered hero; nbsp-joined so they never split.",
"is_bot": false,
"headline": "fix(readme): badges flow as one row — move out of the align container…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d456c3278d725d2aab769e9fd8a0457e7edd4a78",
"body": "… (#189)\n\nRoot cause of the stacking: GitHub renders raw-HTML <img> inside the centered\nblock as display:block, so each anchor-wrapped badge took its own line no matter\nthe source formatting (confirmed via computed style on the live page). Markdown\nimage-link syntax renders the images inline in text flow — the canonical badge-row\npattern. Now one clean centered row of five.",
"is_bot": false,
"headline": "fix(readme): badges as markdown image-links so they flow into one row…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:24:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85313a2ba9295707c62883e1475ad9566458de4f",
"body": "… (#190)\n\nReworked the demo from a flat gray chat mock into the poster in motion, shot at\nretina and kept at full resolution instead of downscaled to muddy.\n\nArt direction (templates/public-pages/demo-slack-mcp.html.tpl):\n- Palette moved off the gray mock onto the poster triad — near-black ground,\n \n[…]\n scene boundaries and expanded 6 -> 7\n(the redesign gave each tool capability its own scene; the user-lookup scene now\nhas its own chapter). JSON-LD uploadDate refreshed; PT3M24S still holds (204.8s).",
"is_bot": false,
"headline": "feat(demo): higher-scale brand-directed demo video + retimed chapters…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:15:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "778f1596fb2aebbb0d63860c573fed6ec08a6873",
"body": "…188)\n\nThe badges were rendering one-per-line (each individually centered) because\neach anchor sat on its own source line inside the centered block. Collapsed to\na single line so they flow into one centered row, and trimmed 7->5: dropped the\nMIT and stars badges, both already shown in GitHub's own chrome (license tab +\nstar count in the repo header). Kept the five that aren't surfaced elsewhere:\nnpm version, weekly downloads, CI, MCP Registry, provenance.",
"is_bot": false,
"headline": "fix(readme): badges to one clean row — single source line, 5 not 7 (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba364cb2db1cfb7bb2bc6c8955e01a756e863e81",
"body": "…d, tighter crop, wider display (#187)\n\nThe GIF opened on a title card cropped from the poster's 47->0 band — so the\nreader met the same big idea twice within 30 lines, then the session text\nrendered ~8px, illegible. Re-cut: no title card (starts on the real session,\nde-duped), tight content crop dropping the window chrome and dead margins,\n1120px source displayed at 900px. Every line now reads — the tool names, the\nunread counts, the briefing. 122KB, loops, end-freeze on the briefing.",
"is_bot": false,
"headline": "fix(readme): legible watch-it-run GIF — drop the poster-dup title car…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c24f836b4cde6aacb215ba815a1fa98711ee827",
"body": "… pile (#186)\n\nThe CI badge (github-native SVG) and the stars badge (style=social) were\ndifferent heights from the flat shields, so the 7-badge row cascaded into a\ndiagonal staircase. All seven now render flat-square at one height and wrap\ninto a clean centered row. CI switched to the shields status endpoint for the\nsame reason; stars href stays repo-root (not /stargazers — that 404s).",
"is_bot": false,
"headline": "fix(readme): uniform flat-square badges — kill the staggered masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:17:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a1b89822ca0fd7455081326db207aa32ff8284",
"body": "…voice (#185)\n\nThe package already ships SLSA provenance attestations (verified live on\n4.6.0) but nothing advertised it. For a tool you hand a live session cookie,\na verifiable supply chain is the strongest honest credibility signal there is.\n\n- Masthead: 'provenance signed' badge (teal), anchors t\n[…]\n\n- package.json: funding field (GitHub Sponsors) so npm surfaces the fund link\n\nNo rename: keeping @jtalk22/slack-mcp — the 4.7k/mo downloads are earned proof\na fresh package name would reset to zero.",
"is_bot": false,
"headline": "feat(readme): surface signed provenance + npm funding, sharpen trust …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:53:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30df7d565142d14920c921bef91296e15ce35380",
"body": null,
"is_bot": false,
"headline": "chore: remove stray verification screenshots from repo root (#184)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07d2ffb02e94380c5f9c608720e85d7ce34117e0",
"body": "Native cue rendering drew full-size captions over the video controls on the\nmuted autoplay hero. Track stays for accessibility; default off. The\ndemo-video page keeps captions default-on (user-initiated viewing).",
"is_bot": false,
"headline": "fix(landing): captions opt-in on the autoplay hero (#183)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed8f7f0932ba9f62fc17fa3520a228d1c39ee1e8",
"body": "…badge, crawl files (#182)\n\n- Landing palette retuned from navy-blue drift to the poster triad:\n near-black surfaces, coral accent, teal links/highlights — one token map,\n every hex accounted for\n- Hero shell now plays the full re-mastered landscape clip with the 47->0\n poster as its cover (was: \n[…]\n the retimed cue file\n- README: npm weekly-downloads badge (real, earned proof) + honest pointer\n to the prompt-recipe doc from the Workflows section\n- robots.txt + sitemap.xml for the Pages surfaces",
"is_bot": false,
"headline": "feat(landing): poster-triad palette, full landscape hero clip, proof …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:57:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "455c15d9480d2e86332d6509a0ce5230d9827589",
"body": "- lib/public-pages.js:40 (landing self-host card) was a third note string\n missed by #177 — now matches the canon six-client list\n- Landing title claimed a 30-second install while the audited claim\n everywhere else is ~2 minutes — retitled to the positioning line, which\n also puts the agent phrasing in the SEO title",
"is_bot": false,
"headline": "fix(pages): landing client list to canon, honest title (#181)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f259fb86752dbae928441fcd6c50a22203e7ae9a",
"body": "…es, CI-gated claims, demo re-capture (#180)",
"is_bot": false,
"headline": "docs: record repo gotchas — branch naming vs guardrail, generated pag…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:46:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "866a73fc09c0575087fc67cf745ecc6017f61c9e",
"body": "Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [docker/login-action](https://github.com/docker/login-action).\n\n\nUpdates `actions/checkout` from 7.0.0 to 7.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://gi\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 2 updates (#176)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-27T18:43:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c320a4e1e18c1bc4de46eb9c8b8b9d9fc2f04362",
"body": "Salvaged from the 2026-05-26 review-workflow branch with both action pins\nrefreshed to current (checkout to the repo-wide v7 pin, the review action\nto the latest v1 SHA). Fires on @-mentions in issues, PR comments, and\nreviews; read-only permissions plus actions:read for CI results. Uses the\nrepo OAuth token secret set 2026-05-26. Draws on the monthly cloud review\ncap.",
"is_bot": false,
"headline": "ci: add mention-triggered review workflow (#179)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36cc13bee778ffb55b81e0c1448d02b4faad87cb",
"body": "…ening pass (#178)\n\n* docs(assets): replace near-black hero-demo.gif with legible watch-it-run.gif\n\nNew GIF: morning-triage arc 0:12-41.4 at 2x, chrome-cropped (1.27x effective\ntype scale), designed first frame held 1.2s (poster 47->0 band, no play glyph),\nend-freeze on the completed briefing. 148 f\n[…]\nce write-path tool' so the\n local-write tools (workflow_save, refresh_tokens) are not implied\n- docs/SETUP.md 'Hosted (Coming Soon)' was stale — hosted is live with a\n free tier; aligned with README",
"is_bot": false,
"headline": "docs(readme): poster hero restored + legible watch-it-run GIF + sharp…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:31:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eff0991e8317d48c9b3eb40a4b6ac906d6070f1f",
"body": "… broadening (#177)\n\n- demo-video: 6 chapter pills (data-t seek+play via one delegated listener,\n timeupdate active-state, teal active) — makes the README chapters claim true\n- client canon (shareNote/demoNote): drop the one client name claimed nowhere\n else, add the two CLI clients the README table already lists\n- share.html masthead: agent-neutral wording; tool phrasing aligned to 12/4/2/3\n- regenerated outputs committed alongside templates + lib",
"is_bot": false,
"headline": "feat(pages): demo-video chapter pills + client canon + share masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee014594566b4d0966d61d43476b7b0b2baef04a",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#175)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-23T03:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f9ed9469bdcb643eaca9365e49600be9f1c6ac9",
"body": "…urns 404 for this repo (verified in a real browser) (#174)",
"is_bot": false,
"headline": "docs(readme): star links point at repo root — the stargazers page ret…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T21:18:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4374f6acb87536ae713e4548bcd391edcb89adb",
"body": "…redesign (#173)\n\n- Centered masthead: title, tagline, badges + social-stars, kbd client-chip row, hook line with the honest verb (borrows).\n- Animated hero: 800px 2.4MB GIF cut from the full demo (unread census with live counts, tool call, morning briefing) grafted to the closing card (0 unreads / \n[…]\nll test. Centered anchor nav + centered star-CTA footer.\n- Repo description + topics updated out-of-band (free surface, no checker reads it).\n- Public-surface-integrity guard: all checks pass locally.",
"is_bot": false,
"headline": "docs(readme): centered masthead, animated hero, candor block, poster …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T20:50:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d7a0fbd29246cf9fe5728a2fabb9ad536073537a",
"body": "…ade hook, panache (#172)\n\n* docs(readme): deep rework for impact — consolidate duplicated per-client install blocks into one section, unify scattered pricing into a single hosted table, sharpen hero and section flow; all links, anchors, and substance preserved (460 to 391 lines)\n\n* docs(readme): pa\n[…]\nRestore the count literals the public-surface-integrity guard asserts (21 tools / 12 read-only / 4 write-path) that prior bold markup had split.\n- Local guard green: all 22 public-surface checks pass.",
"is_bot": false,
"headline": "docs(readme): deep rework — broaden scope past a single client, HN-gr…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T19:24:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ac3958218b44e176e20958fd58ad63a3820f533",
"body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump body-parser from 2.2.2 to 2.3.0 (#167)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T22:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d39d1a8af512a2e198b622133a1afa2c176f673",
"body": "Workspace profiles (SLACK_MCP_PROFILE / --profile, closes #164): every\nstorage surface — token file, metadata sidecar, write lock, Keychain\nservice — gets its own namespace so multiple server instances run\nside-by-side without sharing credentials. Fail-closed name validation;\nreported via storage.pr\n[…]\n a\ngenuine v10-encrypted cookie + LevelDB token log) driving the actual\nextraction pipeline, and profile-namespace isolation tests including\nCLI flag plumbing and fail-closed startup. Suite: 57 tests.",
"is_bot": false,
"headline": "v4.6.0: workspace profiles + Chrome extraction overhaul (#170)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T22:10:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a7efac3472b7fa4b07a8c0c7ea719655413d70d",
"body": "…-process write lock (#169)\n\nVersion bump across the four parity surfaces + CHANGELOG release entry.\nFeature content merged via #163 (closes #162).",
"is_bot": false,
"headline": "v4.5.0: keychain-only credential storage, fail-loud guarantees, cross…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8590b5ce8ff57610c8ae69d23b44389c32b20ab",
"body": "…#163)\n\nOpt-in keychain-only storage: credentials live exclusively in the macOS Keychain, no plaintext token file, verified writes, fail-loud plaintext removal, in-memory fallback for failed persists, cross-process write lock for sidecar metadata, hardened setup wizard and token CLI, storage-modes diagram. All adversarial-review findings addressed with regression tests (44 total).",
"is_bot": false,
"headline": "Keychain-only credential storage via SLACK_MCP_TOKEN_STORAGE (#162) (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab89508e1b490d310801b41a7e5504f82e5d45c7",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.26 to 4.12.31.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.26...v4.12.31)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.31\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.26 to 4.12.31 (#166)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc4f9f57d01867e10839bd0dabfdb71fd695913",
"body": "Bumps the actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-node in the actions group (#165)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:15:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc703e9bd1b5bb137b3793c2fbf987b0bce3fc95",
"body": "… (#158)",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T10:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e3c9abec2b4f7b2bd94459bf34f2e52ca823b33",
"body": "…x (#161)\n\nPush runs assert the page against live upstream truth; release-published runs (new trigger) assert strict convergence. Review follow-ups: optional chaining, numeric 401, unified response helper. Landing-page tile reads the v5 hosted status tools shape (fixed at the template source; local fixture now mirrors the live contract). Transitive ip-address overridden to a patched version (alert 20).",
"is_bot": false,
"headline": "Smoke two-invariants split + review follow-ups + cloud-health tile fi…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T12:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb8773455c59dee4bc40406ed2f07a7bcb9a231",
"body": "Detect Slack session-token death in both transports + health check and return recovery guidance (self-fix first, hosted second; throttled; SLACK_MCP_NO_UPSELL opt-out). Sweep every live public surface from the retired 9/mo tier to the live tiers: Free 2,000 req + 25 tool calls/mo; Pro 19/mo, 190/yr; Team 49/mo, 490/yr; Safeguard 199 waitlist. Version 4.4.3 across all four manifests.",
"is_bot": false,
"headline": "4.4.3 - Lifeboat token-death recovery + live market-tier pricing (#160)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T11:21:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6826459764b77254214e77dd10b11d9d72c535dc",
"body": "…#157)\n\nReleases now publish the MCP registry entry from CI via GitHub Actions OIDC, removing the interactive device-flow login. Guards: server.json/tag version parity, registry-existence skip (with explicit failure on lookup errors), and an npm propagation wait.",
"is_bot": false,
"headline": "ci(publish): publish to the MCP registry via GitHub OIDC on release (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd935040220ad3d3cb553026595a0bd9d79d6ae6",
"body": "…xtraction robustness (#156)\n\nChangelog entries for 4.4.1 and 4.4.2; version aligned across package.json, server.json, glama.json.",
"is_bot": false,
"headline": "release: 4.4.2 — transport dispatch parity, worker contracts, token e…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:08:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc7fcef137e3f976ec098674d66b3129e844a705",
"body": "…ess, page hardening (#155)\n\n* fix(content): purge remaining Q2-2026 rollout claims from live surfaces\n\nReplaces 'rolling out Q2 2026' with 'in development' in the live tool\npayload (lib/handlers.js), tool description (lib/tools.js), public-page\nsources (lib/public-pages.js, templates/public-pages/d\n[…]\nith\nhttps:// (falling back to the canonical docs URL). Fixed in the\ntemplate source and regenerated the derived index.html.\n\n* perf(worker): resolve unread-DM display names concurrently; tidy comments",
"is_bot": false,
"headline": "fix: tool dispatch parity, worker contracts, token extraction robustn…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T22:52:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e6e304a62954929860d7be4bacb9562cbeff6ad",
"body": "…ical description (#154)\n\nQ2 2026 is over: every shipped surface (package/server/glama descriptions, README x3, TROUBLESHOOTING, support-triage template) now says the morning catch-up DM is in development — same truth-pass as the hosted page. One canonical <=100-char description across package.json/server.json/glama.json (registry schema now enforces the cap; surface-integrity check enforces parity).",
"is_bot": false,
"headline": "fix(release): 4.4.1 — purge stale Q2-2026 rollout claims; unify canon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T21:17:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a6a079ba43cbd944a382aee1e61231152510c3d",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1)\n\n---\nupdated-d\n[…]\npe: version-update:semver-patch\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#153)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T10:34:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "607ce5db7d3c486213861f3321fda3c151827b1e",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.26)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.26\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.23 to 4.12.26 (#151)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52cfe94c4cb1840fa9f41a84dcb86703d9e1aa4",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:34:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b57674ebe6e7b3af1f4d9dc4963bb04108cdf47a",
"body": "Bumps node from 25-alpine to 26-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 26-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 25-alpine to 26-alpine (#131)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T16:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dd91d6651bce16aadbad8539233e8c0eaa5aaa8",
"body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.\n- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.1.0...v10.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: ip-address\n dependency-version: 10.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ip-address in /workers/browser-ops (#129)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T15:46:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fbdda94b6a20d7a3f2704370b733ee4e4d547bc",
"body": "…metadata orthogonality)",
"is_bot": false,
"headline": "test: add tool-schema test (rich-fields on 4 read tools; include_all_…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T15:24:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5279f7e2dcd2f68c711a52ca986ac2beacd7f147",
"body": "…LI install one-liner",
"is_bot": false,
"headline": "fix(lint): neutral ROADMAP wording; sync package-lock to 4.4.0; add C…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72e7aafe9c9c56dd5cc2ce999c3e89ecca2dc164",
"body": "…ields section",
"is_bot": false,
"headline": "docs: terse technical 4.4.0 changelog; before/after example in rich-f…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe7922c4933d823ad12dfe27ff1130c1a8a18e1",
"body": "….0 = update/delete message)",
"is_bot": false,
"headline": "docs: surface include_rich_message_fields in README; add ROADMAP (4.5…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7186f8fb95eeb4830090617be88d30f3895444d9",
"body": "…_fields), first unit tests; credit @rvandam (#143)",
"is_bot": false,
"headline": "release: cut 4.4.0 — rich message fields (opt-in include_rich_message…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bcddef52833a8375a0684eb33550f39346df2ae",
"body": "(A) The 'Validate release and issue templates' step grep'd the ENTIRE file when a\ncomms template (incl. CHANGELOG.md) changed. CHANGELOG.md has frozen historical\nrelease notes that legitimately name tool brands, so any commit touching it\nred-mained the branch on content nobody changed. Narrow the sc\n[…]\ng email on any non-fork event\n(e.g. a same-repo push) still fails closed.\n\nBanned-token regex byte-for-byte unchanged; per-commit message enforcement and the\nregression-check anchor strings untouched.",
"is_bot": false,
"headline": "Harden attribution guard: scan added lines only + legible fork-PR path",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bbbb5fa4921595c1ce567d85f8e7cecd135ff78",
"body": "Absorbs PR #143 by @rvandam: surface message content Slack stores outside\n`text` -- attachments, blocks, metadata, files, reactions -- behind an opt-in\n`include_rich_message_fields` flag, plus an `include_all_metadata` passthrough,\nacross conversations.history, get_full_conversation, search.messages\n[…]\nts (helper + tool-schema) and wire `npm test` into CI\n- credit @rvandam in CONTRIBUTORS and this commit; document the absorb-and-credit\n policy in CONTRIBUTING so the attribution check is no surprise",
"is_bot": false,
"headline": "Add opt-in rich Slack message fields (#143)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac13a0ae0539e0c8d97106e57bd64611a9fc87b4",
"body": "… (#145)\n\nBumps the actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.0.3` |\n| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |\n| [docker/\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beeaab0d1f6e24dc3ca02493f13287b6b39f8ef9",
"body": null,
"is_bot": false,
"headline": "Improve public site SEO and accessibility (#146)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-08T22:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "504ccfe2a9e19645234d92ab348dfa35fdf3fbeb",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.23\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.18 to 4.12.23 (#144)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-04T20:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aaf7a2f9bea43abcf2fad6ce5fd0c471e59c03fc",
"body": "…140)\n\nBumps [ws](https://github.com/websockets/ws) from 8.19.0 to 8.21.0.\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/8.19.0...8.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: ws\n dependency-version: 8.21.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ws from 8.19.0 to 8.21.0 in /workers/browser-ops (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-24T15:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fb20b2f69e14d73723a0511aa5ab7963f51d638",
"body": "Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.14.2...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n dependency-version: 6.15.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump qs from 6.14.2 to 6.15.2 (#139)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-23T19:27:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d01751e29a82d656b2caf1c17e41fee75797afe2",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.59.1 to 1.60.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:38:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33b0b2dfee8965ed14c58f8f8ba2115559cff489",
"body": null,
"is_bot": false,
"headline": "chore(changelog): backfill v4.2.0 through v4.3.0 compare links (#136)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fd4ca3f61e8f52810145a4f8748ab4de787c001",
"body": "…nt (#135)\n\n- New `--refresh-tokens` CLI flag (src/cli.js, 4 lines) maps to\n scripts/token-cli.js auto, enabling `npx -y @jtalk22/slack-mcp\n --refresh-tokens` as a clean one-line LaunchAgent invocation.\n- docs/SETUP.md: new \"Keep Tokens Fresh\" section with a macOS\n LaunchAgent template that runs \n[…]\nd 4.2.2 -> 4.3.0.\n- SETUP troubleshooting: \"Verify path to server.js\" -> \"Verify\n JSON syntax in your client's MCP config\" (npx-canonical).\n- .gitignore: three local-only release/sync helper scripts.",
"is_bot": false,
"headline": "v4.3.0: --refresh-tokens flag + LaunchAgent docs + tool-count alignme…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T19:01:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23b2f5230d78b0fcd23a8c7a00742377ccad7418",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#134)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-09T02:34:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92e53f3c89ab64b40df94d8e1d883f14f9f3db27",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.14 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.14...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.18\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.14 to 4.12.18 (#133)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T15:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "094308d4796eecda851840ae290ffbfe7638b264",
"body": "…ps (#132)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.3.0 to 5.3.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.3.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T12:46:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c88aef68ea822028b7893ff3bf2f4c9bbfcdf6e6",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.7 to 1.1.0\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-minor\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#128)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-02T13:01:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fda6532f67e7f7eb5a09c5e8383a5c7bbaf80d8f",
"body": "User flagged the README diagram's Step 3 box as the \"session token thing\nthat needs polishing.\" Two issues addressed:\n\n1. \"Full Access\" headline + tiny \"SESSION TOKEN\" sub-badge was awkward.\n The badge was 74×16px at font-size 8 — the artifact name was visually\n subordinate to a generic \"Full Ac\n[…]\nd).\nREADME.md is in the package but its text doesn't change. GitHub\nrewrites relative image paths to raw.github.com when rendering on\nnpmjs.com, so the polish is visible there too without a republish.",
"is_bot": false,
"headline": "docs(diagram): polish session-token framing + remove dead text (#127)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:33:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75f584b761a06f18c17f066f122e0f7b1d71ee4c",
"body": "…126)\n\nAgentScore advisory AGENTSCORE-2026-0016 flagged v4.2.0 for `command_injection: shell execution with template literal input` (90→80, LOW→MODERATE). Static-analysis false positive — both flagged sites use hardcoded internal constants (KEYCHAIN_SERVICE = \"slack-mcp-server\" in lib/token-store.js\n[…]\n across package.json, server.json (top-level + packages[0].version), glama.json. package-lock.json regenerated.\n\nCompanion: AgentScore re-scan should restore LOW after publish.yml fires on v4.2.2 tag.",
"is_bot": false,
"headline": "v4.2.2: harden shell-exec surface — argv arrays + native chmodSync (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:08:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4e0e59fc47c798a8e34a5f048c67e48617ef08d",
"body": "…rewrite (#125)\n\n* v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff rewrite\n\nTwo real honesty drifts surfaced post-v4.2.0 publish:\n\n1. npm registry hard-truncated `description` at 255 chars on publish.\n Local was 264 ending \"…rolling out Q2 2026).\" → registry-stored copy\n was\n[…]\nls (4th tool was the morning DM, which isn't a\ntool, it's a scheduled job — same caveat that drove this whole sprint).\n\n* fix(lockfile): regen package-lock.json for 4.2.1 — ci public-surface-integrity",
"is_bot": false,
"headline": "v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:01:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2883da4b0737a3102f041d9167208df6c47392cb",
"body": "…esty caveat (#124)\n\nDrafts release notes modeled on RELEASE-NOTES-v4.1.2.md structure:\nworkflow primitives, workflow_kind taxonomy, 6 templates, 3 hosted\nupgrade stubs, v5 hosted pricing, explicit \"Stream C morning-DM rolls\nout in v4.3.0 (Q2 2026)\" note.\n\nAdds \"(rolling out Q2 2026)\" caveat to ever\n[…]\n Pro at \\$9\nper month unlocks unlimited tooling, permanent OAuth, 90-day\nVectorize, 2 workspaces.\n\nSmoke regex still matches because the phrase is preserved verbatim --\nonly the caveat is added after.",
"is_bot": false,
"headline": "docs(v4.2.0): publish prep — RELEASE-NOTES-v4.2.0.md + morning-DM hon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T15:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6af1a03d745a7685ef3ca477c2d7747f2c087cb9",
"body": "…h (#123)\n\nv4.2.0 release: workflow profile primitives, paid hosted stubs, 6 prebuilt templates, visual polish.\n\nHighlights:\n- 21 tools (12 read-only Slack + 4 write-path + 2 workflow profile primitives + 3 hosted upgrade stubs)\n- workflow_kind taxonomy: incident_room, exec_brief, support_inbox, pro\n[…]\nase-preflight env mirror CI's ALLOW_GITHUB_WEB_COMMITTER=1\n\nVerified: 7/7 CI checks green. npm pack: 33 files, 83 kB, version 4.2.0. npm publish to @latest is a separate step (release: created event).",
"is_bot": false,
"headline": "v4.2.0: workflow primitives + paid stubs + 6 templates + visual polis…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-25T21:22:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2cb361fcc937e2affb677424b8a314b02534cba",
"body": "… (#109)\n\nBumps the npm-all group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [express](https://github.com/expressjs/express) and [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `@modelcontextprotocol/sdk` f\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the npm-all group across 1 directory with 3 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34cdb27b94aa3e92340a30582c79b115a52a0634",
"body": "… (#122)\n\nBumps the actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](ht\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 4 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:45:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b285a2b9ce23556cea4cc3f052810957ed38d5a1",
"body": "…ps (#119)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.2 to 5.3.0.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.2 to 5.3.0 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b50bf4e674cf7948284bb0293250e4a39b3c837f",
"body": "* v4.1.1: error surface hardening + auto-heal telemetry\n\nClose the signal-path gap from \"background auto-heal failed\" to\n\"user sees actionable next_action\". A 12-day stale token file\npreviously surfaced a generic tool_call_failed with no route to fix.\n\n- token-store: getStoredTokens passes telemetry\n[…]\nns. The ripgrep path was correct but the GitHub runner does not\npreinstall ripgrep, so the looser fallback was actually the active CI path.\nBoth paths now honor word boundaries and behave identically.",
"is_bot": false,
"headline": "v4.1.2: leveldb token extraction + multi-profile + zombie fix (#117)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-24T15:36:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72e795327ce0b68bc7dcbb55a57112d36b19b0ac",
"body": "Governance files installed per /tmp/repo-audit/phase4/:\n- - dependabot.yml existing (pre-audit), PRESERVED\n - auto-merge.yml existing (different), PRESERVED\n - CODEOWNERS NEW\n - REPO.md written\n\nSee revereveal/.github for org-level governance docs (REPO-standard,\nbranch-naming-convention, archival-policy, anti-recommendations).\n\nGenerated by repo-audit-2026-04-18 sweep.",
"is_bot": false,
"headline": "chore(audit-2026-04-18): install governance baseline (#120)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-18T16:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26a7c918512b893f0b14706ad51bc859fa21f3ed",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.14\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.12 to 4.12.14 (#118)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T03:04:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15adeecef3d2badec54cc75dd0d8ee128e4f6719",
"body": "…ps (#116)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.1 to 5.2.2.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T21:42:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f8faba24d89b730118000d4150202db4899748d",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.6 to 1.0.7\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-patch\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#114)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T10:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9cedd091b36524069c82ecba9480fabf2cf23dc9",
"body": "…ps (#113)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.0 to 5.2.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T20:59:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfb2a515e65e29ee8dc631975fe358a4ee14ff34",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.7 to 4.12.12.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.7...v4.12.12)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.12\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.7 to 4.12.12 (#112)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T06:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05ba6ca32de443847c5abbfd06f4d1ce5557b64b",
"body": "Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.11 to 1.19.13.\n- [Release notes](https://github.com/honojs/node-server/releases)\n- [Commits](https://github.com/honojs/node-server/compare/v1.19.11...v1.19.13)\n\n---\nupdated-dependencies:\n- dependency-name: \"@hono/node-server\"\n dependency-version: 1.19.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 (#111)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T04:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "745a2f1bad946b915220c69c5f4722e09e93012d",
"body": "* fix: regenerate poster with subtle bottom-left play button\n\nOld poster had large centered opaque play button blocking hook text.\nNew: 44px, 35% opacity, bottom-left with backdrop blur.\n\n* copy: new demo tagline — jammed printer, quit six months ago, still in #facilities\n\n* copy: quit -> left",
"is_bot": false,
"headline": "fix: subtle bottom-left play button on README poster (#107)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T23:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9945493bdd8db713e0aba8a519386121a90649b",
"body": "* fix: extract HttpOnly session cookie from Chrome encrypted DB\n\nSlack now marks the d session cookie as HttpOnly, which means\ndocument.cookie cannot access it. This broke token extraction for\nall users on all platforms.\n\nFix: Read Chrome SQLite cookie database directly, decrypt using\nthe Chrome Saf\n[…]\ne now shows 'Hosted docs'.\n\n* fix: sync package-lock version to 4.1.0 + update smoke test assertions\n\npackage-lock.json was stuck at 4.0.0.\nBrowser smoke assertions updated to match current page copy.",
"is_bot": false,
"headline": "v4.1.0: Chrome DB decryption, stealth mode, video polish (#106)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T15:45:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "314b8f3c890e747ee80e912687564cd12472250f",
"body": null,
"is_bot": false,
"headline": "docs: rewrite show hn post with full shipped scope (#105)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36caf93640a11ebe63d3d1a078ca0f0bdd43a845",
"body": null,
"is_bot": false,
"headline": "docs: fresh video, poster, and screenshots (#104)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:23:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "636f1a0bff09ca261b88b6c4f38e5105ca2f558c",
"body": "… (#103)",
"is_bot": false,
"headline": "ux: one-liner token extractor in setup wizard, sequential png capture…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "458eed0489ae9245db1ac4dae7b946bd72a2a50e",
"body": "… play button fix (#102)",
"is_bot": false,
"headline": "feat: bookmarklet extractor, multi-client configs, hq video pipeline,…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56455fa8723d6ab8741efd38599eebbc8f45baff",
"body": "…le, smoke fix (#101)",
"is_bot": false,
"headline": "traction: landing page hero, npm discovery, changelog, comparison tab…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4caa3f2c058c0fc13855977ec39da7c4daa92854",
"body": null,
"is_bot": false,
"headline": "docs: fresh assets with h264 video and play button poster (#100)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T22:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "833884db567979b957396e6030aa02012efacc06",
"body": null,
"is_bot": false,
"headline": "polish: h264 video, play button poster, css fixes, schema.org (#99)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T16:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2176e66c6ff57f8c5907d48c0e1e92a7e540acb0",
"body": "Sets speed to 0.5x before autoplay so title card stays visible for 6 real seconds. Screenshot captures at 4s with full stagger animation complete and 2s buffer before card disappears.",
"is_bot": false,
"headline": "fix: poster captures title card at 0.5x speed (#97)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:47:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea95daac25276684d1ce398313f42cd8310ab214",
"body": "…(#96)\n\nLanding page: updated copy and OG tags, streamlined CTAs, accent color matches demo. Contributing guide expanded. README demo link fixed. Social preview 2x DPI. Mobile clip starts from title card. Deleted .coderabbit.yaml. Template synced.",
"is_bot": false,
"headline": "polish: landing page, title card poster, contributing guide, quality …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aae0eb6867f6b86e44130bb164bdb93569776563",
"body": "…#93)\n\nDiagram SVG redesigned to match demo palette (orange/grey instead of red/teal). Poster captures first tool result (unreads list visible) instead of empty chat. README adds play link and printer PIN reference. Social preview and mobile clip regenerated from Monday Morning video.",
"is_bot": false,
"headline": "docs: diagram redesign, poster shows tool results, refreshed assets (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T14:08:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b1e4ad7f8cca0fc1df3ead50d9e799be10dc5d5",
"body": "Fresh Monday Morning demo video (9MB) and screenshots recorded on M4 Max with the 7-scenario narrative.",
"is_bot": false,
"headline": "docs: fresh Monday Morning demo video and screenshots (#92)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:47:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc095209f9b4bd01a750bfd0e5b4311a480688fd",
"body": "…y, fresh video + repo cleanup (#91)",
"is_bot": false,
"headline": "docs: Monday Morning demo — 7 narrative scenarios, printer PIN myster…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:06:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9c096f77ab3ddfb5d41bf31c9f10fb9e5ccd3d",
"body": "* docs: fresh demo assets recorded on M4 Max\n\n* docs: fresh demo assets recorded on M4 Max",
"is_bot": false,
"headline": "docs: fresh demo assets from M4 Max (#89)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T10:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a23f55f3b8006ec138b15978f7b3f70f9ad37bef",
"body": "* docs: v4.0.0 demo improvements, CI fixes, health endpoint, OG tags, README poster\n\n* chore: self-host fonts for consistent rendering",
"is_bot": false,
"headline": "docs: v4.0.0 demo — fresh assets, viral embed tags (#87)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T09:42:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d68038ef91c3ab47ae910ebc2a4dd21f5aa8ee",
"body": "- Rewrite README: pain-first opener, inline install, demo GIF, OAuth diagram\n- Add v4.0.0 CHANGELOG, SECURITY.md update, release notes\n- Update Cloudflare worker to v4.0.0 with 16 tools\n- Fix browser-smoke assertions for v4.0.0 page content\n- Clean attribution markers from CHANGELOG",
"is_bot": false,
"headline": "release: v4.0.0 preparation (#84)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T04:37:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "499ea096c350d3e9888078f2e859cf04659ab8eb",
"body": "- public-metadata.js: 107 → 22 lines, removed UTM tracking and pricing\n- public-pages.js: removed sales funnel, simplified to product links\n- package.json: removed dead scripts for deleted tools\n- check-public-surface-integrity.js: simplified for v4.0\n- check-version-parity.js: fixed output path\n- Regenerated all public HTML pages",
"is_bot": false,
"headline": "chore: strip commercial tracking URLs and simplify public pages (#82)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f6b99cb66a1616a834ffcb114324823b72d452c",
"body": "* fix: use fs.chmodSync and add input bounds\n\nReplace execSync shell calls with fs.chmodSync for file permissions.\nRedact full API key from web server console output.\nAdd safeParseInt helper with radix and upper bounds for query params.\n\n* chore: remove internal ops docs\n\nRemove commercial surface m\n[…]\nity.js to stop reading deleted\nfiles (distribution ledger, launch ops). Replace stale version\nchecks with core documentation link validation.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify repo: remove ops docs and automation scripts (#81)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:02:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d9b1e593bf63fd497ae59cc801946ec08ba6c995",
"body": "Bumps and [path-to-regexp](https://github.com/pillarjs/path-to-regexp). These dependencies needed to be updated together.\n\nUpdates `path-to-regexp` from 8.3.0 to 8.4.0\n- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)\n- [Changelog](https://github.com/pillarjs/path-to-regexp/blo\n[…]\nxp\n dependency-version: 0.1.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump path-to-regexp (#80)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-30T01:54:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e06d10a68e56b0f6c3881a1bf2a74d78afc1278a",
"body": "Bumps the actions group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` |\n| [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.3.0` |\n| [dependabot/fetch-metadata](https://github.com/de\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 6 updates (#76)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:04:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782910c056e4706ab0593ee97101c4bd07b45825",
"body": "Bumps node from 22-alpine to 25-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 25-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 22-alpine to 25-alpine (#79)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9faf01daabb79c97973439c599f9aa4c10de3750",
"body": null,
"is_bot": false,
"headline": "chore(server): tighten proof and dependabot hygiene (#78)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-20T00:39:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 36,
"commits_last_year": 306,
"latest_release_at": "2026-07-21T22:11:03Z",
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 26,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@jtalk22/slack-mcp",
"exists": true,
"license": "MIT",
"keywords": [
"claude",
"mcp",
"model-context-protocol",
"slack",
"slack-api",
"claude-desktop",
"cli",
"developer-tools",
"mcp-server",
"session-based",
"claude-code",
"gemini-cli",
"local-first",
"remote-mcp",
"session-mirroring",
"slack-mcp",
"secure-by-default",
"llm",
"slack-integration",
"ai-agents",
"automation",
"productivity",
"oauth-free",
"no-admin-approval",
"cursor",
"copilot",
"windsurf",
"codex-cli",
"stealth-mode"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@jtalk22/slack-mcp",
"is_deprecated": false,
"latest_version": "4.6.0",
"repository_url": "https://github.com/jtalk22/slack-mcp-server",
"versions_count": 41,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4736,
"first_published_at": "2026-01-03T20:26:39.283000Z",
"latest_published_at": "2026-07-21T22:11:23.724000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 20,
"stars": 29,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-11",
"count": 1
},
{
"date": "2026-01-17",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-07-14",
"count": 2
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 20,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 95,
"malicious_count": 0,
"assessed_package": "npm:@jtalk22/slack-mcp@4.6.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.27.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "@cloudflare/puppeteer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.13",
"ecosystem": "npm"
},
{
"name": "@puppeteer/browsers",
"direct": false,
"version": "2.2.4",
"ecosystem": "npm"
},
{
"name": "@tootallnate/quickjs-emscripten",
"direct": false,
"version": "0.23.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "25.4.0",
"ecosystem": "npm"
},
{
"name": "@types/yauzl",
"direct": false,
"version": "2.10.3",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.18.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ast-types",
"direct": false,
"version": "0.13.4",
"ecosystem": "npm"
},
{
"name": "b4a",
"direct": false,
"version": "1.8.0",
"ecosystem": "npm"
},
{
"name": "bare-events",
"direct": false,
"version": "2.8.2",
"ecosystem": "npm"
},
{
"name": "bare-fs",
"direct": false,
"version": "4.5.5",
"ecosystem": "npm"
},
{
"name": "bare-os",
"direct": false,
"version": "3.7.1",
"ecosystem": "npm"
},
{
"name": "bare-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "bare-stream",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "bare-url",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "basic-ftp",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "buffer-crc32",
"direct": false,
"version": "0.2.13",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.5",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "data-uri-to-buffer",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "degenerator",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "devtools-protocol",
"direct": false,
"version": "0.0.1299070",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escodegen",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "events-universal",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.6",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.3.1",
"ecosystem": "npm"
},
{
"name": "extract-zip",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-fifo",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "fd-slicer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "get-uri",
"direct": false,
"version": "6.0.5",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.31",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.1.3",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "7.18.3",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "netmask",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "pac-proxy-agent",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "pac-resolver",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "pend",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "progress",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "proxy-agent",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "proxy-from-env",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.2",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.4",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "smart-buffer",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "socks",
"direct": false,
"version": "2.8.7",
"ecosystem": "npm"
},
{
"name": "socks-proxy-agent",
"direct": false,
"version": "8.0.5",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "streamx",
"direct": false,
"version": "2.23.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "3.1.8",
"ecosystem": "npm"
},
{
"name": "teex",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "text-decoder",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "through",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "unbzip2-stream",
"direct": false,
"version": "1.4.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "7.18.2",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.21.0",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.2",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "yauzl",
"direct": false,
"version": "2.10.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": false,
"version": "4.3.4",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.1",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 171,
"direct_count": 2,
"indirect_count": 169
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 164,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 7,
"closed_unmerged_prs": 21
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "jtalk22",
"commits": 269,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
},
{
"type": "User",
"login": "bryanmwood",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/171692620?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ai-review-noise-guard.yml",
"attribution-guardrail.yml",
"ci.yml",
"claude.yml",
"dependabot-auto-merge.yml",
"docker-publish.yml",
"live-browser-smoke.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/25 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 9,
"reason": "dependency not pinned by hash detected -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"ran_at": "2026-07-30T17:27:47Z",
"aggregate_score": 6.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T16:48:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T16:47:42Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jtalk22/slack-mcp-server",
"host": "github.com",
"name": "slack-mcp-server",
"owner": "jtalk22"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 70,
"vitality": 89,
"community": 56,
"governance": 51,
"calibration": "2026-08-02",
"engineering": 81,
"ai_readiness": 57,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 306,
"human_commit_share": 0.68,
"days_since_last_push": 2,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "306 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 306
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 36,
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "36 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 36
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 20,
"stars": 29,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4736
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,736 downloads/month across npm",
"points": 49,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4736,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 79,
"inputs": {
"merged_prs": 164,
"open_issues": 0,
"closed_issues": 7,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 21,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "164/185 decided PRs merged",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 164,
"decided": 185
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "jtalk22",
"public_repos": 2,
"account_age_days": 1085
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of jtalk22",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "jtalk22"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~2 yr old",
"points": 9.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "41 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 41
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 81,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://mcp.revasserlabs.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 70,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@jtalk22/slack-mcp@4.6.0 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@jtalk22/slack-mcp@4.6.0",
"assessed": 95
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 95,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 95,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "68 of 68 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 68,
"sampled": 68
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.32
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "32 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 32,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 9,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/44 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 44,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"mcp-server",
"library",
"network-service"
],
"scores": {
"cli": 2,
"library": 6,
"mcp-server": 9,
"network-service": 4
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:@modelcontextprotocol/sdk",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
},
{
"tier": "tags",
"label": "mcp-server",
"source": "tag:mcp-server",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:28:08.196642Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jtalk22/slack-mcp-server.svg",
"full_name": "jtalk22/slack-mcp-server",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con jtalk22/slack-mcp-server. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.5.0, esquema v0.27.0 — metodología completa · wiki de métricas.
