jtalk22/slack-mcp-server holds a health index of 81 out of 100, placing it in the Excellent band. It scores highest on Vitality (89/100) and lowest on Sustainability & Governance (51/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.
81
overall / 100
Excellent
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
81
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
95
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@jtalk22/slack-mcp@4.6.0 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 20 ⇿
0Stars
20Forks
32Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 3Minor 9Patch 20
OpenSSF Scorecard 6.2 / 10
6.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 17:27 UTC
Full resolved dependency set from the GitHub dependency graph: 2 direct and 169 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
npm
@modelcontextprotocol/sdk
1.29.0
direct
npm
express
5.2.1
direct
npm
@cloudflare/puppeteer
1.1.0
indirect
npm
@hono/node-server
1.19.13
indirect
npm
@puppeteer/browsers
2.2.4
indirect
npm
@tootallnate/quickjs-emscripten
0.23.0
indirect
npm
@types/node
25.4.0
indirect
npm
@types/yauzl
2.10.3
indirect
npm
accepts
2.0.0
indirect
npm
agent-base
7.1.4
indirect
npm
ajv
8.18.0
indirect
npm
ajv-formats
3.0.1
indirect
npm
ansi-regex
5.0.1
indirect
npm
ansi-styles
4.3.0
indirect
npm
ast-types
0.13.4
indirect
npm
b4a
1.8.0
indirect
npm
bare-events
2.8.2
indirect
npm
bare-fs
4.5.5
indirect
npm
bare-os
3.7.1
indirect
npm
bare-path
3.0.0
indirect
npm
bare-stream
2.8.1
indirect
npm
bare-url
2.3.2
indirect
npm
base64-js
1.5.1
indirect
npm
basic-ftp
5.3.1
indirect
npm
body-parser
2.3.0
indirect
npm
buffer
5.7.1
indirect
npm
buffer-crc32
0.2.13
indirect
npm
bytes
3.1.2
indirect
npm
call-bind-apply-helpers
1.0.2
indirect
npm
call-bound
1.0.4
indirect
npm
cliui
8.0.1
indirect
npm
color-convert
2.0.1
indirect
npm
color-name
1.1.4
indirect
npm
content-disposition
1.1.0
indirect
npm
content-type
1.0.5
indirect
npm
content-type
2.0.0
indirect
npm
cookie
0.7.2
indirect
npm
cookie-signature
1.2.2
indirect
npm
cors
2.8.5
indirect
npm
cross-spawn
7.0.6
indirect
npm
data-uri-to-buffer
6.0.2
indirect
npm
debug
4.4.3
indirect
npm
degenerator
5.0.1
indirect
npm
depd
2.0.0
indirect
npm
devtools-protocol
0.0.1299070
indirect
npm
dunder-proto
1.0.1
indirect
npm
ee-first
1.1.1
indirect
npm
emoji-regex
8.0.0
indirect
npm
encodeurl
2.0.0
indirect
npm
end-of-stream
1.4.5
indirect
npm
es-define-property
1.0.1
indirect
npm
es-errors
1.3.0
indirect
npm
es-object-atoms
1.1.1
indirect
npm
escalade
3.2.0
indirect
npm
escape-html
1.0.3
indirect
npm
escodegen
2.1.0
indirect
npm
esprima
4.0.1
indirect
npm
estraverse
5.3.0
indirect
npm
esutils
2.0.3
indirect
npm
etag
1.8.1
indirect
npm
events-universal
1.0.1
indirect
npm
eventsource
3.0.7
indirect
npm
eventsource-parser
3.0.6
indirect
npm
express-rate-limit
8.3.1
indirect
npm
extract-zip
2.0.1
indirect
npm
fast-deep-equal
3.1.3
indirect
npm
fast-fifo
1.3.2
indirect
npm
fast-uri
3.1.4
indirect
npm
fd-slicer
1.1.0
indirect
npm
finalhandler
2.1.1
indirect
npm
forwarded
0.2.0
indirect
npm
fresh
2.0.0
indirect
npm
fsevents
2.3.2
indirect
npm
function-bind
1.1.2
indirect
npm
get-caller-file
2.0.5
indirect
npm
get-intrinsic
1.3.0
indirect
npm
get-proto
1.0.1
indirect
npm
get-stream
5.2.0
indirect
npm
get-uri
6.0.5
indirect
npm
gopd
1.2.0
indirect
npm
has-symbols
1.1.0
indirect
npm
hasown
2.0.2
indirect
npm
hono
4.12.31
indirect
npm
http-errors
2.0.1
indirect
npm
http-proxy-agent
7.0.2
indirect
npm
https-proxy-agent
7.0.6
indirect
npm
iconv-lite
0.7.2
indirect
npm
ieee754
1.2.1
indirect
npm
inherits
2.0.4
indirect
npm
ip-address
10.2.0
indirect
npm
ipaddr.js
1.9.1
indirect
npm
is-fullwidth-code-point
3.0.0
indirect
npm
is-promise
4.0.0
indirect
npm
isexe
2.0.0
indirect
npm
jose
6.1.3
indirect
npm
json-schema-traverse
1.0.0
indirect
npm
json-schema-typed
8.0.2
indirect
npm
lru-cache
7.18.3
indirect
npm
math-intrinsics
1.1.0
indirect
npm
media-typer
1.1.0
indirect
npm
merge-descriptors
2.0.0
indirect
npm
mime-db
1.54.0
indirect
npm
mime-types
3.0.2
indirect
npm
ms
2.1.3
indirect
npm
negotiator
1.0.0
indirect
npm
netmask
2.0.2
indirect
npm
object-assign
4.1.1
indirect
npm
object-inspect
1.13.4
indirect
npm
on-finished
2.4.1
indirect
npm
once
1.4.0
indirect
npm
pac-proxy-agent
7.2.0
indirect
npm
pac-resolver
7.0.1
indirect
npm
parseurl
1.3.3
indirect
npm
path-key
3.1.1
indirect
npm
path-to-regexp
8.4.0
indirect
npm
pend
1.2.0
indirect
npm
pkce-challenge
5.0.1
indirect
npm
playwright
1.61.1
indirect
npm
playwright-core
1.61.1
indirect
npm
progress
2.0.3
indirect
npm
proxy-addr
2.0.7
indirect
npm
proxy-agent
6.5.0
indirect
npm
proxy-from-env
1.1.0
indirect
npm
pump
3.0.4
indirect
npm
qs
6.15.2
indirect
npm
range-parser
1.2.1
indirect
npm
raw-body
3.0.2
indirect
npm
require-directory
2.1.1
indirect
npm
require-from-string
2.0.2
indirect
npm
router
2.2.0
indirect
npm
safer-buffer
2.1.2
indirect
npm
semver
7.7.4
indirect
npm
send
1.2.1
indirect
npm
serve-static
2.2.1
indirect
npm
setprototypeof
1.2.0
indirect
npm
shebang-command
2.0.0
indirect
npm
shebang-regex
3.0.0
indirect
npm
side-channel
1.1.0
indirect
npm
side-channel-list
1.0.0
indirect
npm
side-channel-map
1.0.1
indirect
npm
side-channel-weakmap
1.0.2
indirect
npm
smart-buffer
4.2.0
indirect
npm
socks
2.8.7
indirect
npm
socks-proxy-agent
8.0.5
indirect
npm
source-map
0.6.1
indirect
npm
statuses
2.0.2
indirect
npm
streamx
2.23.0
indirect
npm
string-width
4.2.3
indirect
npm
strip-ansi
6.0.1
indirect
npm
tar-fs
3.1.2
indirect
npm
tar-stream
3.1.8
indirect
npm
teex
1.0.1
indirect
npm
text-decoder
1.2.7
indirect
npm
through
2.3.8
indirect
npm
toidentifier
1.0.1
indirect
npm
tslib
2.8.1
indirect
npm
type-is
2.1.0
indirect
npm
unbzip2-stream
1.4.3
indirect
npm
undici-types
7.18.2
indirect
npm
unpipe
1.0.0
indirect
npm
vary
1.1.2
indirect
npm
which
2.0.2
indirect
npm
wrap-ansi
7.0.0
indirect
npm
wrappy
1.0.2
indirect
npm
ws
8.21.0
indirect
npm
y18n
5.0.8
indirect
npm
yargs
17.7.2
indirect
npm
yargs-parser
21.1.1
indirect
npm
yauzl
2.10.0
indirect
npm
zod
4.3.4
indirect
npm
zod-to-json-schema
3.25.1
indirect
Dependency advisories 0
Installing npm:@jtalk22/slack-mcp@4.6.0 pulls in 95 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"is_fork": false,
"size_kb": 128141,
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"languages": {
"Shell": 9922,
"Dockerfile": 1486,
"JavaScript": 374396,
"Go Template": 152008
},
"pushed_at": "2026-07-28T16:47:42Z",
"created_at": "2026-01-03T19:19:56Z",
"owner_type": "User",
"updated_at": "2026-07-28T16:48:41Z",
"description": "Slack for your AI agent — session tokens, not OAuth. No app to register, no admin approval. Works with any MCP client. 21 tools.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"Go Template"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "jtalk22",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4",
"created_at": "2023-08-10T05:59:22Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1085
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.6.0",
"kind": "minor",
"published_at": "2026-07-21T22:11:03Z"
},
{
"tag": "v4.5.0",
"kind": "minor",
"published_at": "2026-07-21T21:53:40Z"
},
{
"tag": "v4.4.3",
"kind": "patch",
"published_at": "2026-07-03T12:01:20Z"
},
{
"tag": "v4.4.2",
"kind": "patch",
"published_at": "2026-07-02T23:39:53Z"
},
{
"tag": "v4.4.1",
"kind": "patch",
"published_at": "2026-07-02T23:39:34Z"
},
{
"tag": "v4.4.0",
"kind": "minor",
"published_at": "2026-06-09T14:45:43Z"
},
{
"tag": "v4.3.0",
"kind": "minor",
"published_at": "2026-05-12T19:02:16Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2026-04-26T16:08:51Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2026-04-26T16:02:21Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2026-04-26T15:44:44Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2026-03-31T15:46:31Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2026-03-30T04:46:04Z"
},
{
"tag": "v3.2.5",
"kind": "patch",
"published_at": "2026-03-12T00:25:26Z"
},
{
"tag": "v3.2.4",
"kind": "patch",
"published_at": "2026-03-11T02:11:17Z"
},
{
"tag": "v3.2.3",
"kind": "patch",
"published_at": "2026-03-11T00:21:01Z"
},
{
"tag": "v3.2.2",
"kind": "patch",
"published_at": "2026-03-10T19:26:55Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-03-10T14:40:27Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-03-10T14:11:44Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-02-28T04:08:08Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-26T12:49:41Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-02-26T10:35:38Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-02-25T05:53:00Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-02-25T05:31:17Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-02-24T14:28:58Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-01-22T17:36:37Z"
},
{
"tag": "v1.1.9",
"kind": "patch",
"published_at": "2026-01-09T00:55:04Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2026-01-09T00:36:28Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2026-01-08T23:09:54Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2026-01-08T20:33:13Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2026-01-08T20:04:52Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2026-01-08T13:45:12Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-08T13:34:37Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-01-03T21:29:23Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-01-03T21:17:05Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-01-03T21:14:46Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-01-03T19:30:22Z"
}
],
"recent_commits": [
{
"oid": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"body": "The hosted section listed three inference tools (smart_search, catch_me_up,\ntriage) — the three that ship in this package as upgrade stubs. The hosted\nbrain actually runs a fourth, slack_workflow_brief, which renders a saved\nworkflow profile into a contract-validated brief and has no OSS stub.\n\nNaming it keeps the OSS and hosted surfaces telling the same story. The\ntool table is unchanged: this package still ships exactly 21 tools.",
"is_bot": false,
"headline": "docs(readme): name the hosted brain fourth inference tool (#195)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T16:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "640b9628a4ff7eac4f2a5612c43693143d525eb0",
"body": "Naming another server in our own README introduces a competitor most\nreaders never knew existed — free publicity handed to a larger repo, and\nself-defeating on a page whose job is to win the reader. The differentiators\nthat block carried (automatic Chrome extraction, managed hosted OAuth,\nkeychain-o\n[…]\n in their own sections, so\nnothing substantive is lost. The How-the-Chrome-extraction-works section\nstays — that stands entirely on its own.\n\nGates: language, public-surface-integrity, drift all pass.",
"is_bot": false,
"headline": "docs(readme): remove the competitor-comparison block (#194)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T13:05:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bde8aebd43c6a0003e6b425323cc6617e3ad1e4d",
"body": "…internals (#193)\n\nTwo positioning gaps a Show HN thread surfaces in its first comments:\n\n1. korotovsky/slack-mcp-server (the established Go server with the same\n session-token approach) was never mentioned. Added an honest candor\n <details> that credits its breadth (Apps, GovSlack, Group DMs) a\n[…]\nChrome exact\n PBKDF2 then AES-128-CBC v10 scheme, linking the readable lib/token-store.js.\n\nNo tool/count changes. Banned-language, public-surface-integrity, and\ngenerated-page drift gates all pass.",
"is_bot": false,
"headline": "docs(readme): address the incumbent + document the Chrome-extraction …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:51:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5b105501b7b23c8846c70ca4594d41404febff",
"body": "Both demo wrapper pages still carried the old navy palette while the poster,\nREADME hero, and recorded demo set had moved to the near-black / coral / teal\ntriad. This aligns them.\n\n- demo-video.html: near-black ground with faint coral (left) + teal (right)\n corner glows, replacing the navy gradient\n[…]\nzed to the brand muted token.\n\nRegenerated public/* from templates. Drift, banned-language, and\npublic-surface-integrity gates all pass. Renders verified at desktop 1440\nand mobile 390 for both pages.",
"is_bot": false,
"headline": "style(demo-pages): brand-align demo wrappers to poster canon (#192)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-28T12:46:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53a4a5b42e1722b9d4d19a1a69c6f04665d05729",
"body": "… (#191)\n\nRoot cause (confirmed via live computed styles + a known-good repo): GitHub\nrenders images inside an align=center container as display:block, so every\nbadge took its own line no matter the syntax (raw HTML, single-line, or\nmarkdown all stacked). Markdown badges OUTSIDE any align wrapper render inline\nand flow — the pattern Hono and many top repos use. Moved the five badges to a\nplain markdown row above the centered hero; nbsp-joined so they never split.",
"is_bot": false,
"headline": "fix(readme): badges flow as one row — move out of the align container…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d456c3278d725d2aab769e9fd8a0457e7edd4a78",
"body": "… (#189)\n\nRoot cause of the stacking: GitHub renders raw-HTML <img> inside the centered\nblock as display:block, so each anchor-wrapped badge took its own line no matter\nthe source formatting (confirmed via computed style on the live page). Markdown\nimage-link syntax renders the images inline in text flow — the canonical badge-row\npattern. Now one clean centered row of five.",
"is_bot": false,
"headline": "fix(readme): badges as markdown image-links so they flow into one row…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:24:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85313a2ba9295707c62883e1475ad9566458de4f",
"body": "… (#190)\n\nReworked the demo from a flat gray chat mock into the poster in motion, shot at\nretina and kept at full resolution instead of downscaled to muddy.\n\nArt direction (templates/public-pages/demo-slack-mcp.html.tpl):\n- Palette moved off the gray mock onto the poster triad — near-black ground,\n \n[…]\n scene boundaries and expanded 6 -> 7\n(the redesign gave each tool capability its own scene; the user-lookup scene now\nhas its own chapter). JSON-LD uploadDate refreshed; PT3M24S still holds (204.8s).",
"is_bot": false,
"headline": "feat(demo): higher-scale brand-directed demo video + retimed chapters…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T23:15:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "778f1596fb2aebbb0d63860c573fed6ec08a6873",
"body": "…188)\n\nThe badges were rendering one-per-line (each individually centered) because\neach anchor sat on its own source line inside the centered block. Collapsed to\na single line so they flow into one centered row, and trimmed 7->5: dropped the\nMIT and stars badges, both already shown in GitHub's own chrome (license tab +\nstar count in the repo header). Kept the five that aren't surfaced elsewhere:\nnpm version, weekly downloads, CI, MCP Registry, provenance.",
"is_bot": false,
"headline": "fix(readme): badges to one clean row — single source line, 5 not 7 (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba364cb2db1cfb7bb2bc6c8955e01a756e863e81",
"body": "…d, tighter crop, wider display (#187)\n\nThe GIF opened on a title card cropped from the poster's 47->0 band — so the\nreader met the same big idea twice within 30 lines, then the session text\nrendered ~8px, illegible. Re-cut: no title card (starts on the real session,\nde-duped), tight content crop dropping the window chrome and dead margins,\n1120px source displayed at 900px. Every line now reads — the tool names, the\nunread counts, the briefing. 122KB, loops, end-freeze on the briefing.",
"is_bot": false,
"headline": "fix(readme): legible watch-it-run GIF — drop the poster-dup title car…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c24f836b4cde6aacb215ba815a1fa98711ee827",
"body": "… pile (#186)\n\nThe CI badge (github-native SVG) and the stars badge (style=social) were\ndifferent heights from the flat shields, so the 7-badge row cascaded into a\ndiagonal staircase. All seven now render flat-square at one height and wrap\ninto a clean centered row. CI switched to the shields status endpoint for the\nsame reason; stars href stays repo-root (not /stargazers — that 404s).",
"is_bot": false,
"headline": "fix(readme): uniform flat-square badges — kill the staggered masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T22:17:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a1b89822ca0fd7455081326db207aa32ff8284",
"body": "…voice (#185)\n\nThe package already ships SLSA provenance attestations (verified live on\n4.6.0) but nothing advertised it. For a tool you hand a live session cookie,\na verifiable supply chain is the strongest honest credibility signal there is.\n\n- Masthead: 'provenance signed' badge (teal), anchors t\n[…]\n\n- package.json: funding field (GitHub Sponsors) so npm surfaces the fund link\n\nNo rename: keeping @jtalk22/slack-mcp — the 4.7k/mo downloads are earned proof\na fresh package name would reset to zero.",
"is_bot": false,
"headline": "feat(readme): surface signed provenance + npm funding, sharpen trust …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:53:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30df7d565142d14920c921bef91296e15ce35380",
"body": null,
"is_bot": false,
"headline": "chore: remove stray verification screenshots from repo root (#184)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07d2ffb02e94380c5f9c608720e85d7ce34117e0",
"body": "Native cue rendering drew full-size captions over the video controls on the\nmuted autoplay hero. Track stays for accessibility; default off. The\ndemo-video page keeps captions default-on (user-initiated viewing).",
"is_bot": false,
"headline": "fix(landing): captions opt-in on the autoplay hero (#183)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T20:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed8f7f0932ba9f62fc17fa3520a228d1c39ee1e8",
"body": "…badge, crawl files (#182)\n\n- Landing palette retuned from navy-blue drift to the poster triad:\n near-black surfaces, coral accent, teal links/highlights — one token map,\n every hex accounted for\n- Hero shell now plays the full re-mastered landscape clip with the 47->0\n poster as its cover (was: \n[…]\n the retimed cue file\n- README: npm weekly-downloads badge (real, earned proof) + honest pointer\n to the prompt-recipe doc from the Workflows section\n- robots.txt + sitemap.xml for the Pages surfaces",
"is_bot": false,
"headline": "feat(landing): poster-triad palette, full landscape hero clip, proof …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:57:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "455c15d9480d2e86332d6509a0ce5230d9827589",
"body": "- lib/public-pages.js:40 (landing self-host card) was a third note string\n missed by #177 — now matches the canon six-client list\n- Landing title claimed a 30-second install while the audited claim\n everywhere else is ~2 minutes — retitled to the positioning line, which\n also puts the agent phrasing in the SEO title",
"is_bot": false,
"headline": "fix(pages): landing client list to canon, honest title (#181)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T19:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f259fb86752dbae928441fcd6c50a22203e7ae9a",
"body": "…es, CI-gated claims, demo re-capture (#180)",
"is_bot": false,
"headline": "docs: record repo gotchas — branch naming vs guardrail, generated pag…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:46:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "866a73fc09c0575087fc67cf745ecc6017f61c9e",
"body": "Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [docker/login-action](https://github.com/docker/login-action).\n\n\nUpdates `actions/checkout` from 7.0.0 to 7.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://gi\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 2 updates (#176)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-27T18:43:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c320a4e1e18c1bc4de46eb9c8b8b9d9fc2f04362",
"body": "Salvaged from the 2026-05-26 review-workflow branch with both action pins\nrefreshed to current (checkout to the repo-wide v7 pin, the review action\nto the latest v1 SHA). Fires on @-mentions in issues, PR comments, and\nreviews; read-only permissions plus actions:read for CI results. Uses the\nrepo OAuth token secret set 2026-05-26. Draws on the monthly cloud review\ncap.",
"is_bot": false,
"headline": "ci: add mention-triggered review workflow (#179)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36cc13bee778ffb55b81e0c1448d02b4faad87cb",
"body": "…ening pass (#178)\n\n* docs(assets): replace near-black hero-demo.gif with legible watch-it-run.gif\n\nNew GIF: morning-triage arc 0:12-41.4 at 2x, chrome-cropped (1.27x effective\ntype scale), designed first frame held 1.2s (poster 47->0 band, no play glyph),\nend-freeze on the completed briefing. 148 f\n[…]\nce write-path tool' so the\n local-write tools (workflow_save, refresh_tokens) are not implied\n- docs/SETUP.md 'Hosted (Coming Soon)' was stale — hosted is live with a\n free tier; aligned with README",
"is_bot": false,
"headline": "docs(readme): poster hero restored + legible watch-it-run GIF + sharp…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:31:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eff0991e8317d48c9b3eb40a4b6ac906d6070f1f",
"body": "… broadening (#177)\n\n- demo-video: 6 chapter pills (data-t seek+play via one delegated listener,\n timeupdate active-state, teal active) — makes the README chapters claim true\n- client canon (shareNote/demoNote): drop the one client name claimed nowhere\n else, add the two CLI clients the README table already lists\n- share.html masthead: agent-neutral wording; tool phrasing aligned to 12/4/2/3\n- regenerated outputs committed alongside templates + lib",
"is_bot": false,
"headline": "feat(pages): demo-video chapter pills + client canon + share masthead…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-27T18:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee014594566b4d0966d61d43476b7b0b2baef04a",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#175)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-23T03:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f9ed9469bdcb643eaca9365e49600be9f1c6ac9",
"body": "…urns 404 for this repo (verified in a real browser) (#174)",
"is_bot": false,
"headline": "docs(readme): star links point at repo root — the stargazers page ret…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T21:18:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4374f6acb87536ae713e4548bcd391edcb89adb",
"body": "…redesign (#173)\n\n- Centered masthead: title, tagline, badges + social-stars, kbd client-chip row, hook line with the honest verb (borrows).\n- Animated hero: 800px 2.4MB GIF cut from the full demo (unread census with live counts, tool call, morning briefing) grafted to the closing card (0 unreads / \n[…]\nll test. Centered anchor nav + centered star-CTA footer.\n- Repo description + topics updated out-of-band (free surface, no checker reads it).\n- Public-surface-integrity guard: all checks pass locally.",
"is_bot": false,
"headline": "docs(readme): centered masthead, animated hero, candor block, poster …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T20:50:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d7a0fbd29246cf9fe5728a2fabb9ad536073537a",
"body": "…ade hook, panache (#172)\n\n* docs(readme): deep rework for impact — consolidate duplicated per-client install blocks into one section, unify scattered pricing into a single hosted table, sharpen hero and section flow; all links, anchors, and substance preserved (460 to 391 lines)\n\n* docs(readme): pa\n[…]\nRestore the count literals the public-surface-integrity guard asserts (21 tools / 12 read-only / 4 write-path) that prior bold markup had split.\n- Local guard green: all 22 public-surface checks pass.",
"is_bot": false,
"headline": "docs(readme): deep rework — broaden scope past a single client, HN-gr…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-22T19:24:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ac3958218b44e176e20958fd58ad63a3820f533",
"body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump body-parser from 2.2.2 to 2.3.0 (#167)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T22:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d39d1a8af512a2e198b622133a1afa2c176f673",
"body": "Workspace profiles (SLACK_MCP_PROFILE / --profile, closes #164): every\nstorage surface — token file, metadata sidecar, write lock, Keychain\nservice — gets its own namespace so multiple server instances run\nside-by-side without sharing credentials. Fail-closed name validation;\nreported via storage.pr\n[…]\n a\ngenuine v10-encrypted cookie + LevelDB token log) driving the actual\nextraction pipeline, and profile-namespace isolation tests including\nCLI flag plumbing and fail-closed startup. Suite: 57 tests.",
"is_bot": false,
"headline": "v4.6.0: workspace profiles + Chrome extraction overhaul (#170)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T22:10:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a7efac3472b7fa4b07a8c0c7ea719655413d70d",
"body": "…-process write lock (#169)\n\nVersion bump across the four parity surfaces + CHANGELOG release entry.\nFeature content merged via #163 (closes #162).",
"is_bot": false,
"headline": "v4.5.0: keychain-only credential storage, fail-loud guarantees, cross…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8590b5ce8ff57610c8ae69d23b44389c32b20ab",
"body": "…#163)\n\nOpt-in keychain-only storage: credentials live exclusively in the macOS Keychain, no plaintext token file, verified writes, fail-loud plaintext removal, in-memory fallback for failed persists, cross-process write lock for sidecar metadata, hardened setup wizard and token CLI, storage-modes diagram. All adversarial-review findings addressed with regression tests (44 total).",
"is_bot": false,
"headline": "Keychain-only credential storage via SLACK_MCP_TOKEN_STORAGE (#162) (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-21T21:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab89508e1b490d310801b41a7e5504f82e5d45c7",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.26 to 4.12.31.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.26...v4.12.31)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.31\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.26 to 4.12.31 (#166)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cc4f9f57d01867e10839bd0dabfdb71fd695913",
"body": "Bumps the actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-node in the actions group (#165)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T21:15:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc703e9bd1b5bb137b3793c2fbf987b0bce3fc95",
"body": "… (#158)",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T10:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e3c9abec2b4f7b2bd94459bf34f2e52ca823b33",
"body": "…x (#161)\n\nPush runs assert the page against live upstream truth; release-published runs (new trigger) assert strict convergence. Review follow-ups: optional chaining, numeric 401, unified response helper. Landing-page tile reads the v5 hosted status tools shape (fixed at the template source; local fixture now mirrors the live contract). Transitive ip-address overridden to a patched version (alert 20).",
"is_bot": false,
"headline": "Smoke two-invariants split + review follow-ups + cloud-health tile fi…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T12:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb8773455c59dee4bc40406ed2f07a7bcb9a231",
"body": "Detect Slack session-token death in both transports + health check and return recovery guidance (self-fix first, hosted second; throttled; SLACK_MCP_NO_UPSELL opt-out). Sweep every live public surface from the retired 9/mo tier to the live tiers: Free 2,000 req + 25 tool calls/mo; Pro 19/mo, 190/yr; Team 49/mo, 490/yr; Safeguard 199 waitlist. Version 4.4.3 across all four manifests.",
"is_bot": false,
"headline": "4.4.3 - Lifeboat token-death recovery + live market-tier pricing (#160)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-03T11:21:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6826459764b77254214e77dd10b11d9d72c535dc",
"body": "…#157)\n\nReleases now publish the MCP registry entry from CI via GitHub Actions OIDC, removing the interactive device-flow login. Guards: server.json/tag version parity, registry-existence skip (with explicit failure on lookup errors), and an npm propagation wait.",
"is_bot": false,
"headline": "ci(publish): publish to the MCP registry via GitHub OIDC on release (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd935040220ad3d3cb553026595a0bd9d79d6ae6",
"body": "…xtraction robustness (#156)\n\nChangelog entries for 4.4.1 and 4.4.2; version aligned across package.json, server.json, glama.json.",
"is_bot": false,
"headline": "release: 4.4.2 — transport dispatch parity, worker contracts, token e…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T23:08:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc7fcef137e3f976ec098674d66b3129e844a705",
"body": "…ess, page hardening (#155)\n\n* fix(content): purge remaining Q2-2026 rollout claims from live surfaces\n\nReplaces 'rolling out Q2 2026' with 'in development' in the live tool\npayload (lib/handlers.js), tool description (lib/tools.js), public-page\nsources (lib/public-pages.js, templates/public-pages/d\n[…]\nith\nhttps:// (falling back to the canonical docs URL). Fixed in the\ntemplate source and regenerated the derived index.html.\n\n* perf(worker): resolve unread-DM display names concurrently; tidy comments",
"is_bot": false,
"headline": "fix: tool dispatch parity, worker contracts, token extraction robustn…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T22:52:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e6e304a62954929860d7be4bacb9562cbeff6ad",
"body": "…ical description (#154)\n\nQ2 2026 is over: every shipped surface (package/server/glama descriptions, README x3, TROUBLESHOOTING, support-triage template) now says the morning catch-up DM is in development — same truth-pass as the hosted page. One canonical <=100-char description across package.json/server.json/glama.json (registry schema now enforces the cap; surface-integrity check enforces parity).",
"is_bot": false,
"headline": "fix(release): 4.4.1 — purge stale Q2-2026 rollout claims; unify canon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-07-02T21:17:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a6a079ba43cbd944a382aee1e61231152510c3d",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1)\n\n---\nupdated-d\n[…]\npe: version-update:semver-patch\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#153)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T10:34:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "607ce5db7d3c486213861f3321fda3c151827b1e",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.26)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.26\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.23 to 4.12.26 (#151)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52cfe94c4cb1840fa9f41a84dcb86703d9e1aa4",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T10:34:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b57674ebe6e7b3af1f4d9dc4963bb04108cdf47a",
"body": "Bumps node from 25-alpine to 26-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 26-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 25-alpine to 26-alpine (#131)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T16:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dd91d6651bce16aadbad8539233e8c0eaa5aaa8",
"body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.\n- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.1.0...v10.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: ip-address\n dependency-version: 10.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ip-address in /workers/browser-ops (#129)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T15:46:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fbdda94b6a20d7a3f2704370b733ee4e4d547bc",
"body": "…metadata orthogonality)",
"is_bot": false,
"headline": "test: add tool-schema test (rich-fields on 4 read tools; include_all_…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T15:24:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5279f7e2dcd2f68c711a52ca986ac2beacd7f147",
"body": "…LI install one-liner",
"is_bot": false,
"headline": "fix(lint): neutral ROADMAP wording; sync package-lock to 4.4.0; add C…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72e7aafe9c9c56dd5cc2ce999c3e89ecca2dc164",
"body": "…ields section",
"is_bot": false,
"headline": "docs: terse technical 4.4.0 changelog; before/after example in rich-f…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe7922c4933d823ad12dfe27ff1130c1a8a18e1",
"body": "….0 = update/delete message)",
"is_bot": false,
"headline": "docs: surface include_rich_message_fields in README; add ROADMAP (4.5…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7186f8fb95eeb4830090617be88d30f3895444d9",
"body": "…_fields), first unit tests; credit @rvandam (#143)",
"is_bot": false,
"headline": "release: cut 4.4.0 — rich message fields (opt-in include_rich_message…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bcddef52833a8375a0684eb33550f39346df2ae",
"body": "(A) The 'Validate release and issue templates' step grep'd the ENTIRE file when a\ncomms template (incl. CHANGELOG.md) changed. CHANGELOG.md has frozen historical\nrelease notes that legitimately name tool brands, so any commit touching it\nred-mained the branch on content nobody changed. Narrow the sc\n[…]\ng email on any non-fork event\n(e.g. a same-repo push) still fails closed.\n\nBanned-token regex byte-for-byte unchanged; per-commit message enforcement and the\nregression-check anchor strings untouched.",
"is_bot": false,
"headline": "Harden attribution guard: scan added lines only + legible fork-PR path",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bbbb5fa4921595c1ce567d85f8e7cecd135ff78",
"body": "Absorbs PR #143 by @rvandam: surface message content Slack stores outside\n`text` -- attachments, blocks, metadata, files, reactions -- behind an opt-in\n`include_rich_message_fields` flag, plus an `include_all_metadata` passthrough,\nacross conversations.history, get_full_conversation, search.messages\n[…]\nts (helper + tool-schema) and wire `npm test` into CI\n- credit @rvandam in CONTRIBUTORS and this commit; document the absorb-and-credit\n policy in CONTRIBUTING so the attribution check is no surprise",
"is_bot": false,
"headline": "Add opt-in rich Slack message fields (#143)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-09T14:03:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac13a0ae0539e0c8d97106e57bd64611a9fc87b4",
"body": "… (#145)\n\nBumps the actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.0.3` |\n| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |\n| [docker/\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beeaab0d1f6e24dc3ca02493f13287b6b39f8ef9",
"body": null,
"is_bot": false,
"headline": "Improve public site SEO and accessibility (#146)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-06-08T22:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "504ccfe2a9e19645234d92ab348dfa35fdf3fbeb",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.23\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.18 to 4.12.23 (#144)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-04T20:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aaf7a2f9bea43abcf2fad6ce5fd0c471e59c03fc",
"body": "…140)\n\nBumps [ws](https://github.com/websockets/ws) from 8.19.0 to 8.21.0.\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/8.19.0...8.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: ws\n dependency-version: 8.21.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump ws from 8.19.0 to 8.21.0 in /workers/browser-ops (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-24T15:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fb20b2f69e14d73723a0511aa5ab7963f51d638",
"body": "Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.14.2...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n dependency-version: 6.15.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump qs from 6.14.2 to 6.15.2 (#139)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-23T19:27:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d01751e29a82d656b2caf1c17e41fee75797afe2",
"body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.59.1 to 1.60.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump playwright in the npm-all group (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:38:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33b0b2dfee8965ed14c58f8f8ba2115559cff489",
"body": null,
"is_bot": false,
"headline": "chore(changelog): backfill v4.2.0 through v4.3.0 compare links (#136)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T20:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fd4ca3f61e8f52810145a4f8748ab4de787c001",
"body": "…nt (#135)\n\n- New `--refresh-tokens` CLI flag (src/cli.js, 4 lines) maps to\n scripts/token-cli.js auto, enabling `npx -y @jtalk22/slack-mcp\n --refresh-tokens` as a clean one-line LaunchAgent invocation.\n- docs/SETUP.md: new \"Keep Tokens Fresh\" section with a macOS\n LaunchAgent template that runs \n[…]\nd 4.2.2 -> 4.3.0.\n- SETUP troubleshooting: \"Verify path to server.js\" -> \"Verify\n JSON syntax in your client's MCP config\" (npx-canonical).\n- .gitignore: three local-only release/sync helper scripts.",
"is_bot": false,
"headline": "v4.3.0: --refresh-tokens flag + LaunchAgent docs + tool-count alignme…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-05-12T19:01:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23b2f5230d78b0fcd23a8c7a00742377ccad7418",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#134)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-09T02:34:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92e53f3c89ab64b40df94d8e1d883f14f9f3db27",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.14 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.14...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.18\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.14 to 4.12.18 (#133)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T15:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "094308d4796eecda851840ae290ffbfe7638b264",
"body": "…ps (#132)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.3.0 to 5.3.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.3.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T12:46:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c88aef68ea822028b7893ff3bf2f4c9bbfcdf6e6",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.7 to 1.1.0\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-minor\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#128)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-02T13:01:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fda6532f67e7f7eb5a09c5e8383a5c7bbaf80d8f",
"body": "User flagged the README diagram's Step 3 box as the \"session token thing\nthat needs polishing.\" Two issues addressed:\n\n1. \"Full Access\" headline + tiny \"SESSION TOKEN\" sub-badge was awkward.\n The badge was 74×16px at font-size 8 — the artifact name was visually\n subordinate to a generic \"Full Ac\n[…]\nd).\nREADME.md is in the package but its text doesn't change. GitHub\nrewrites relative image paths to raw.github.com when rendering on\nnpmjs.com, so the polish is visible there too without a republish.",
"is_bot": false,
"headline": "docs(diagram): polish session-token framing + remove dead text (#127)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:33:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75f584b761a06f18c17f066f122e0f7b1d71ee4c",
"body": "…126)\n\nAgentScore advisory AGENTSCORE-2026-0016 flagged v4.2.0 for `command_injection: shell execution with template literal input` (90→80, LOW→MODERATE). Static-analysis false positive — both flagged sites use hardcoded internal constants (KEYCHAIN_SERVICE = \"slack-mcp-server\" in lib/token-store.js\n[…]\n across package.json, server.json (top-level + packages[0].version), glama.json. package-lock.json regenerated.\n\nCompanion: AgentScore re-scan should restore LOW after publish.yml fires on v4.2.2 tag.",
"is_bot": false,
"headline": "v4.2.2: harden shell-exec surface — argv arrays + native chmodSync (#…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:08:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4e0e59fc47c798a8e34a5f048c67e48617ef08d",
"body": "…rewrite (#125)\n\n* v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff rewrite\n\nTwo real honesty drifts surfaced post-v4.2.0 publish:\n\n1. npm registry hard-truncated `description` at 255 chars on publish.\n Local was 264 ending \"…rolling out Q2 2026).\" → registry-stored copy\n was\n[…]\nls (4th tool was the morning DM, which isn't a\ntool, it's a scheduled job — same caveat that drove this whole sprint).\n\n* fix(lockfile): regen package-lock.json for 4.2.1 — ci public-surface-integrity",
"is_bot": false,
"headline": "v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T16:01:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2883da4b0737a3102f041d9167208df6c47392cb",
"body": "…esty caveat (#124)\n\nDrafts release notes modeled on RELEASE-NOTES-v4.1.2.md structure:\nworkflow primitives, workflow_kind taxonomy, 6 templates, 3 hosted\nupgrade stubs, v5 hosted pricing, explicit \"Stream C morning-DM rolls\nout in v4.3.0 (Q2 2026)\" note.\n\nAdds \"(rolling out Q2 2026)\" caveat to ever\n[…]\n Pro at \\$9\nper month unlocks unlimited tooling, permanent OAuth, 90-day\nVectorize, 2 workspaces.\n\nSmoke regex still matches because the phrase is preserved verbatim --\nonly the caveat is added after.",
"is_bot": false,
"headline": "docs(v4.2.0): publish prep — RELEASE-NOTES-v4.2.0.md + morning-DM hon…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-26T15:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6af1a03d745a7685ef3ca477c2d7747f2c087cb9",
"body": "…h (#123)\n\nv4.2.0 release: workflow profile primitives, paid hosted stubs, 6 prebuilt templates, visual polish.\n\nHighlights:\n- 21 tools (12 read-only Slack + 4 write-path + 2 workflow profile primitives + 3 hosted upgrade stubs)\n- workflow_kind taxonomy: incident_room, exec_brief, support_inbox, pro\n[…]\nase-preflight env mirror CI's ALLOW_GITHUB_WEB_COMMITTER=1\n\nVerified: 7/7 CI checks green. npm pack: 33 files, 83 kB, version 4.2.0. npm publish to @latest is a separate step (release: created event).",
"is_bot": false,
"headline": "v4.2.0: workflow primitives + paid stubs + 6 templates + visual polis…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-25T21:22:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2cb361fcc937e2affb677424b8a314b02534cba",
"body": "… (#109)\n\nBumps the npm-all group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [express](https://github.com/expressjs/express) and [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `@modelcontextprotocol/sdk` f\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the npm-all group across 1 directory with 3 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34cdb27b94aa3e92340a30582c79b115a52a0634",
"body": "… (#122)\n\nBumps the actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](ht\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group across 1 directory with 4 updates…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:45:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b285a2b9ce23556cea4cc3f052810957ed38d5a1",
"body": "…ps (#119)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.2 to 5.3.0.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.2 to 5.3.0 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-25T17:40:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b50bf4e674cf7948284bb0293250e4a39b3c837f",
"body": "* v4.1.1: error surface hardening + auto-heal telemetry\n\nClose the signal-path gap from \"background auto-heal failed\" to\n\"user sees actionable next_action\". A 12-day stale token file\npreviously surfaced a generic tool_call_failed with no route to fix.\n\n- token-store: getStoredTokens passes telemetry\n[…]\nns. The ripgrep path was correct but the GitHub runner does not\npreinstall ripgrep, so the looser fallback was actually the active CI path.\nBoth paths now honor word boundaries and behave identically.",
"is_bot": false,
"headline": "v4.1.2: leveldb token extraction + multi-profile + zombie fix (#117)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-24T15:36:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72e795327ce0b68bc7dcbb55a57112d36b19b0ac",
"body": "Governance files installed per /tmp/repo-audit/phase4/:\n- - dependabot.yml existing (pre-audit), PRESERVED\n - auto-merge.yml existing (different), PRESERVED\n - CODEOWNERS NEW\n - REPO.md written\n\nSee revereveal/.github for org-level governance docs (REPO-standard,\nbranch-naming-convention, archival-policy, anti-recommendations).\n\nGenerated by repo-audit-2026-04-18 sweep.",
"is_bot": false,
"headline": "chore(audit-2026-04-18): install governance baseline (#120)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-04-18T16:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26a7c918512b893f0b14706ad51bc859fa21f3ed",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.14\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.12 to 4.12.14 (#118)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T03:04:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15adeecef3d2badec54cc75dd0d8ee128e4f6719",
"body": "…ps (#116)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.1 to 5.2.2.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T21:42:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f8faba24d89b730118000d4150202db4899748d",
"body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.6 to 1.0.7\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-patch\n dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @cloudflare/puppeteer (#114)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T10:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9cedd091b36524069c82ecba9480fabf2cf23dc9",
"body": "…ps (#113)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.0 to 5.2.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n dependency-version: 5.2.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /workers/browser-o…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T20:59:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfb2a515e65e29ee8dc631975fe358a4ee14ff34",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.7 to 4.12.12.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.7...v4.12.12)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.12\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump hono from 4.12.7 to 4.12.12 (#112)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T06:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05ba6ca32de443847c5abbfd06f4d1ce5557b64b",
"body": "Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.11 to 1.19.13.\n- [Release notes](https://github.com/honojs/node-server/releases)\n- [Commits](https://github.com/honojs/node-server/compare/v1.19.11...v1.19.13)\n\n---\nupdated-dependencies:\n- dependency-name: \"@hono/node-server\"\n dependency-version: 1.19.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 (#111)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T04:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "745a2f1bad946b915220c69c5f4722e09e93012d",
"body": "* fix: regenerate poster with subtle bottom-left play button\n\nOld poster had large centered opaque play button blocking hook text.\nNew: 44px, 35% opacity, bottom-left with backdrop blur.\n\n* copy: new demo tagline — jammed printer, quit six months ago, still in #facilities\n\n* copy: quit -> left",
"is_bot": false,
"headline": "fix: subtle bottom-left play button on README poster (#107)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T23:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9945493bdd8db713e0aba8a519386121a90649b",
"body": "* fix: extract HttpOnly session cookie from Chrome encrypted DB\n\nSlack now marks the d session cookie as HttpOnly, which means\ndocument.cookie cannot access it. This broke token extraction for\nall users on all platforms.\n\nFix: Read Chrome SQLite cookie database directly, decrypt using\nthe Chrome Saf\n[…]\ne now shows 'Hosted docs'.\n\n* fix: sync package-lock version to 4.1.0 + update smoke test assertions\n\npackage-lock.json was stuck at 4.0.0.\nBrowser smoke assertions updated to match current page copy.",
"is_bot": false,
"headline": "v4.1.0: Chrome DB decryption, stealth mode, video polish (#106)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T15:45:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "314b8f3c890e747ee80e912687564cd12472250f",
"body": null,
"is_bot": false,
"headline": "docs: rewrite show hn post with full shipped scope (#105)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36caf93640a11ebe63d3d1a078ca0f0bdd43a845",
"body": null,
"is_bot": false,
"headline": "docs: fresh video, poster, and screenshots (#104)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:23:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "636f1a0bff09ca261b88b6c4f38e5105ca2f558c",
"body": "… (#103)",
"is_bot": false,
"headline": "ux: one-liner token extractor in setup wizard, sequential png capture…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T10:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "458eed0489ae9245db1ac4dae7b946bd72a2a50e",
"body": "… play button fix (#102)",
"is_bot": false,
"headline": "feat: bookmarklet extractor, multi-client configs, hq video pipeline,…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56455fa8723d6ab8741efd38599eebbc8f45baff",
"body": "…le, smoke fix (#101)",
"is_bot": false,
"headline": "traction: landing page hero, npm discovery, changelog, comparison tab…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-31T09:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4caa3f2c058c0fc13855977ec39da7c4daa92854",
"body": null,
"is_bot": false,
"headline": "docs: fresh assets with h264 video and play button poster (#100)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T22:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "833884db567979b957396e6030aa02012efacc06",
"body": null,
"is_bot": false,
"headline": "polish: h264 video, play button poster, css fixes, schema.org (#99)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T16:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2176e66c6ff57f8c5907d48c0e1e92a7e540acb0",
"body": "Sets speed to 0.5x before autoplay so title card stays visible for 6 real seconds. Screenshot captures at 4s with full stagger animation complete and 2s buffer before card disappears.",
"is_bot": false,
"headline": "fix: poster captures title card at 0.5x speed (#97)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:47:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea95daac25276684d1ce398313f42cd8310ab214",
"body": "…(#96)\n\nLanding page: updated copy and OG tags, streamlined CTAs, accent color matches demo. Contributing guide expanded. README demo link fixed. Social preview 2x DPI. Mobile clip starts from title card. Deleted .coderabbit.yaml. Template synced.",
"is_bot": false,
"headline": "polish: landing page, title card poster, contributing guide, quality …",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T15:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aae0eb6867f6b86e44130bb164bdb93569776563",
"body": "…#93)\n\nDiagram SVG redesigned to match demo palette (orange/grey instead of red/teal). Poster captures first tool result (unreads list visible) instead of empty chat. README adds play link and printer PIN reference. Social preview and mobile clip regenerated from Monday Morning video.",
"is_bot": false,
"headline": "docs: diagram redesign, poster shows tool results, refreshed assets (…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T14:08:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b1e4ad7f8cca0fc1df3ead50d9e799be10dc5d5",
"body": "Fresh Monday Morning demo video (9MB) and screenshots recorded on M4 Max with the 7-scenario narrative.",
"is_bot": false,
"headline": "docs: fresh Monday Morning demo video and screenshots (#92)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:47:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc095209f9b4bd01a750bfd0e5b4311a480688fd",
"body": "…y, fresh video + repo cleanup (#91)",
"is_bot": false,
"headline": "docs: Monday Morning demo — 7 narrative scenarios, printer PIN myster…",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T13:06:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9c096f77ab3ddfb5d41bf31c9f10fb9e5ccd3d",
"body": "* docs: fresh demo assets recorded on M4 Max\n\n* docs: fresh demo assets recorded on M4 Max",
"is_bot": false,
"headline": "docs: fresh demo assets from M4 Max (#89)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T10:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a23f55f3b8006ec138b15978f7b3f70f9ad37bef",
"body": "* docs: v4.0.0 demo improvements, CI fixes, health endpoint, OG tags, README poster\n\n* chore: self-host fonts for consistent rendering",
"is_bot": false,
"headline": "docs: v4.0.0 demo — fresh assets, viral embed tags (#87)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T09:42:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d68038ef91c3ab47ae910ebc2a4dd21f5aa8ee",
"body": "- Rewrite README: pain-first opener, inline install, demo GIF, OAuth diagram\n- Add v4.0.0 CHANGELOG, SECURITY.md update, release notes\n- Update Cloudflare worker to v4.0.0 with 16 tools\n- Fix browser-smoke assertions for v4.0.0 page content\n- Clean attribution markers from CHANGELOG",
"is_bot": false,
"headline": "release: v4.0.0 preparation (#84)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T04:37:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "499ea096c350d3e9888078f2e859cf04659ab8eb",
"body": "- public-metadata.js: 107 → 22 lines, removed UTM tracking and pricing\n- public-pages.js: removed sales funnel, simplified to product links\n- package.json: removed dead scripts for deleted tools\n- check-public-surface-integrity.js: simplified for v4.0\n- check-version-parity.js: fixed output path\n- Regenerated all public HTML pages",
"is_bot": false,
"headline": "chore: strip commercial tracking URLs and simplify public pages (#82)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f6b99cb66a1616a834ffcb114324823b72d452c",
"body": "* fix: use fs.chmodSync and add input bounds\n\nReplace execSync shell calls with fs.chmodSync for file permissions.\nRedact full API key from web server console output.\nAdd safeParseInt helper with radix and upper bounds for query params.\n\n* chore: remove internal ops docs\n\nRemove commercial surface m\n[…]\nity.js to stop reading deleted\nfiles (distribution ledger, launch ops). Replace stale version\nchecks with core documentation link validation.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify repo: remove ops docs and automation scripts (#81)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-30T02:02:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d9b1e593bf63fd497ae59cc801946ec08ba6c995",
"body": "Bumps and [path-to-regexp](https://github.com/pillarjs/path-to-regexp). These dependencies needed to be updated together.\n\nUpdates `path-to-regexp` from 8.3.0 to 8.4.0\n- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)\n- [Changelog](https://github.com/pillarjs/path-to-regexp/blo\n[…]\nxp\n dependency-version: 0.1.13\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump path-to-regexp (#80)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-30T01:54:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e06d10a68e56b0f6c3881a1bf2a74d78afc1278a",
"body": "Bumps the actions group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` |\n| [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.3.0` |\n| [dependabot/fetch-metadata](https://github.com/de\n[…]\npe: version-update:semver-major\n dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump the actions group with 6 updates (#76)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:04:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782910c056e4706ab0593ee97101c4bd07b45825",
"body": "Bumps node from 22-alpine to 25-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n dependency-version: 25-alpine\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump node from 22-alpine to 25-alpine (#79)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-28T07:01:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9faf01daabb79c97973439c599f9aa4c10de3750",
"body": null,
"is_bot": false,
"headline": "chore(server): tighten proof and dependabot hygiene (#78)",
"author_name": "jtalk22",
"author_login": "jtalk22",
"committed_at": "2026-03-20T00:39:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 36,
"commits_last_year": 306,
"latest_release_at": "2026-07-21T22:11:03Z",
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 26,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@jtalk22/slack-mcp",
"exists": true,
"license": "MIT",
"keywords": [
"claude",
"mcp",
"model-context-protocol",
"slack",
"slack-api",
"claude-desktop",
"cli",
"developer-tools",
"mcp-server",
"session-based",
"claude-code",
"gemini-cli",
"local-first",
"remote-mcp",
"session-mirroring",
"slack-mcp",
"secure-by-default",
"llm",
"slack-integration",
"ai-agents",
"automation",
"productivity",
"oauth-free",
"no-admin-approval",
"cursor",
"copilot",
"windsurf",
"codex-cli",
"stealth-mode"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@jtalk22/slack-mcp",
"is_deprecated": false,
"latest_version": "4.6.0",
"repository_url": "https://github.com/jtalk22/slack-mcp-server",
"versions_count": 41,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4736,
"first_published_at": "2026-01-03T20:26:39.283000Z",
"latest_published_at": "2026-07-21T22:11:23.724000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 20,
"stars": 29,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-11",
"count": 1
},
{
"date": "2026-01-17",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-07-14",
"count": 2
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 20,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 95,
"malicious_count": 0,
"assessed_package": "npm:@jtalk22/slack-mcp@4.6.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.27.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "@cloudflare/puppeteer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.13",
"ecosystem": "npm"
},
{
"name": "@puppeteer/browsers",
"direct": false,
"version": "2.2.4",
"ecosystem": "npm"
},
{
"name": "@tootallnate/quickjs-emscripten",
"direct": false,
"version": "0.23.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "25.4.0",
"ecosystem": "npm"
},
{
"name": "@types/yauzl",
"direct": false,
"version": "2.10.3",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.18.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ast-types",
"direct": false,
"version": "0.13.4",
"ecosystem": "npm"
},
{
"name": "b4a",
"direct": false,
"version": "1.8.0",
"ecosystem": "npm"
},
{
"name": "bare-events",
"direct": false,
"version": "2.8.2",
"ecosystem": "npm"
},
{
"name": "bare-fs",
"direct": false,
"version": "4.5.5",
"ecosystem": "npm"
},
{
"name": "bare-os",
"direct": false,
"version": "3.7.1",
"ecosystem": "npm"
},
{
"name": "bare-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "bare-stream",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "bare-url",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "basic-ftp",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "buffer-crc32",
"direct": false,
"version": "0.2.13",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.5",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "data-uri-to-buffer",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "degenerator",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "devtools-protocol",
"direct": false,
"version": "0.0.1299070",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escodegen",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "events-universal",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.6",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.3.1",
"ecosystem": "npm"
},
{
"name": "extract-zip",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-fifo",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "fd-slicer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "get-uri",
"direct": false,
"version": "6.0.5",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.31",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.1.3",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "7.18.3",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "netmask",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "pac-proxy-agent",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "pac-resolver",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "pend",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "progress",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "proxy-agent",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "proxy-from-env",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.2",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.4",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "smart-buffer",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "socks",
"direct": false,
"version": "2.8.7",
"ecosystem": "npm"
},
{
"name": "socks-proxy-agent",
"direct": false,
"version": "8.0.5",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "streamx",
"direct": false,
"version": "2.23.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "3.1.8",
"ecosystem": "npm"
},
{
"name": "teex",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "text-decoder",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "through",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "unbzip2-stream",
"direct": false,
"version": "1.4.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "7.18.2",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.21.0",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.2",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "yauzl",
"direct": false,
"version": "2.10.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": false,
"version": "4.3.4",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.1",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 171,
"direct_count": 2,
"indirect_count": 169
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 164,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 7,
"closed_unmerged_prs": 21
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "jtalk22",
"commits": 269,
"avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
},
{
"type": "User",
"login": "bryanmwood",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/171692620?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ai-review-noise-guard.yml",
"attribution-guardrail.yml",
"ci.yml",
"claude.yml",
"dependabot-auto-merge.yml",
"docker-publish.yml",
"live-browser-smoke.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/25 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 9,
"reason": "dependency not pinned by hash detected -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
"ran_at": "2026-07-30T17:27:47Z",
"aggregate_score": 6.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T16:48:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T16:47:42Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jtalk22/slack-mcp-server",
"host": "github.com",
"name": "slack-mcp-server",
"owner": "jtalk22"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 70,
"vitality": 89,
"community": 56,
"governance": 51,
"calibration": "2026-08-02",
"engineering": 81,
"ai_readiness": 57,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 306,
"human_commit_share": 0.68,
"days_since_last_push": 2,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "306 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 306
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 36,
"latest_release_tag": "v4.6.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 9.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "36 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 36
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 20,
"stars": 29,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4736
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,736 downloads/month across npm",
"points": 49,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4736,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.989
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 79,
"inputs": {
"merged_prs": 164,
"open_issues": 0,
"closed_issues": 7,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 21,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "164/185 decided PRs merged",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 164,
"decided": 185
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "jtalk22",
"public_repos": 2,
"account_age_days": 1085
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of jtalk22",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "jtalk22"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~2 yr old",
"points": 9.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@jtalk22/slack-mcp"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "41 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 41
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 81,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"claude",
"codex",
"copilot",
"cursor",
"developer-tools",
"gemini-cli",
"llm",
"mcp",
"mcp-server",
"model-context-protocol",
"productivity",
"slack",
"slack-api",
"windsurf",
"ai",
"agents",
"automation",
"slack-integration",
"claude-desktop"
],
"has_wiki": true,
"homepage": "https://mcp.revasserlabs.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://mcp.revasserlabs.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 70,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/25 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@jtalk22/slack-mcp@4.6.0 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@jtalk22/slack-mcp@4.6.0",
"assessed": 95
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 95,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 95,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4895
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "68 of 68 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 68,
"sampled": 68
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.32
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "32 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 32,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 9",
"points": 9,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 42457,
"source_files_sampled": 44,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/44 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 44,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"mcp-server",
"library",
"network-service"
],
"scores": {
"cli": 2,
"library": 6,
"mcp-server": 9,
"network-service": 4
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:@modelcontextprotocol/sdk",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
},
{
"tier": "tags",
"label": "mcp-server",
"source": "tag:mcp-server",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:28:08.196642Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jtalk22/slack-mcp-server.svg",
"full_name": "jtalk22/slack-mcp-server",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with jtalk22/slack-mcp-server. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
