公开记录
软件健康报告模式 0.27.0 · 指标 2.5.0 · 2026-07-30 17:28 UTC

jtalk22 / slack-mcp-server

Slack for your AI agent — session tokens, not OAuth. No app to register, no admin approval. Works with any MCP client. 21 tools.

JavaScript · Go TemplateMIT★ 29 星标⑂ 20 复刻始于 2026年1月在 GitHub 上查看 ↗
类型MCP 服务器网络服务如何判定

jtalk22/slack-mcp-server 的健康指数为 100 分中的 81 分,处于「优秀」区间。 其得分最高的类别是Vitality(89/100),最低的是Sustainability & Governance(51/100)。 最近一次更新在 2 天前。 近期的大部分工作由 1 位贡献者完成。

81
总分 / 100
优秀

软件健康指数

指标归入加权类别,统一采用 1–100 量表。总体分先取类别加权平均,再依据公开记录的分布进行校准,使各等级具有百分位含义;当公开证据触发高风险司法辖区政策时,评级会按政策调整,并设置 34(存在风险)的上限。

81
卓越93-100公开记录中的最高层级(约前 5%);基本满足所有检验标准
优秀80-92各方面均表现强劲;仅有少量不足
良好65-79健康;不足之处有限且可控
中等50-64可接受,但存在明显不足;建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节;采用时应保持审慎
危急1-19问题严重(项目被弃置、仅有单一维护者、缺乏基本工程规范)
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形,而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

加权总体分 69 经校准后在公布的指数量表上为 81(记录校准 2026-08-02)。

所有权

jtalk22个人账户
2 关注者2 个公开仓库始于 2023年8月

该仓库由个人账户拥有。相较于组织支持的项目,单一所有者项目的延续性风险更高。

软件包生态系统

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码,是否仍在发布版本?

89优秀 · 占总体的 21%
评分方式
36/36推送新近度 — 最近一次推送于 2 天前
18/36提交节奏 — 52 周中有 26 周有提交
18/18提交量 — 最近一年 306 次提交
10/10OpenSSF Scorecard:Maintained — 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
所用输入
commits_last_year306
human_commit_share0.68
days_since_last_push2
active_weeks_last_year26

发布纪律

100卓越
评分方式
27/27有发布版本 — 已发布 36 个发布版本
36/36发布时效 — 最近一次发布版本于 8 天前
27/27发布节奏 — 约每 9.6 天发布一次
0/10OpenSSF Scorecard:Signed-Releases — 无数据
所用输入
releases_count36
latest_release_tagv4.6.0
releases_from_tags
days_since_latest_release8
mean_days_between_releases9.6
已排除计分(无数据或不适用):OpenSSF Scorecard:Signed-Releases。 其余权重已重新归一化。

社区与采用

项目是否拥有用户、下载量与关注度,并具备欢迎贡献者参与的配置?

56中等 · 占总体的 17%

流行度与采用

34存在风险
评分方式
23.5/60星标 — 29 个星标
10.7/25复刻 — 20 个复刻
0/15关注者 — 1 位关注者
所用输入
forks20
stars29
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

77良好
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证(MIT)
18/18CONTRIBUTING 指南
0/13.5行为准则
0/7.2议题模板
6.3/6.3PR 模板
所用输入
has_readme
has_license
readme_badges
has_contributing
has_issue_template
has_code_of_conduct
readme_badge_services
has_pull_request_template
评分方式
49/80月度下载量 — npm 合计每月 4,736 次下载
0/20注册表被依赖数 — 该生态系统不报告此项
所用输入
packages@jtalk22/slack-mcp
dependents
ecosystemsnpm
total_downloads
monthly_downloads4,736
已排除计分(无数据或不适用):注册表被依赖数。 其余权重已重新归一化。

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持,以及软件包的维护状况?

51中等 · 占总体的 23%
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0.2/22.5提交分布 — 头号贡献者编写了 99% 的提交
4.1/13.5贡献者广度 — 3 位贡献者
0/10OpenSSF Scorecard:Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled3
top_contributor_share0.989
评分方式
42/42议题解决 — 100% 的议题已关闭
26.6/30PR 接受 — 已裁定的 PR 中 164/185 已合并
0/13Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决
0/15OpenSSF Scorecard:Code-Review — Found 0/25 approved changesets -- score normalized to 0
所用输入
merged_prs164
open_issues0
closed_issues7
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio1
closed_unmerged_prs21
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
已排除计分(无数据或不适用):newcomer_pr_acceptance。 其余权重已重新归一化。
评分方式
10/30所有权背书 — 个人(用户)账户
0/20已验证域名 — 不适用于个人账户
3.4/25所有者影响力 — jtalk22 有 2 位关注者
9.4/25既往记录 — 2 个公开仓库,账户约 2 年
所用输入
followers2
owner_typeUser
is_verified
owner_loginjtalk22
public_repos2
account_age_days1,085
已排除计分(无数据或不适用):已验证域名。 其余权重已重新归一化。
评分方式
25/25已发布且可解析 — npm 上有 1 个软件包
35/35发布时效 — 最近一次发布于 8 天前
20/20版本历史 — 41 个已发布版本
20/20未被弃用 — 活跃,未被弃用或撤回
所用输入
packages@jtalk22/slack-mcp
ecosystemsnpm
any_deprecated
min_days_since_publish8

工程质量

基础的工程与文档实践是否到位?

81优秀 · 占总体的 19%

工程实践

68良好
评分方式
24/24CI 工作流 — 8 个工作流
24/24存在测试
0/16Linter 配置
0/9.6Pre-commit 钩子
0/6.4.editorconfig
20/20OpenSSF Scorecard:CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
所用输入
has_ci
has_tests
has_editorconfig
has_linter_config
has_precommit_config

文档

100卓越
评分方式
30/30README
25/25文档目录
15/15文档 / 主页站点 — https://mcp.revasserlabs.com
10/10仓库描述
10/10主题标签 — 20 个主题标签
10/10Wiki
所用输入
topicsai-agents, claude, codex, copilot, cursor, developer-tools, gemini-cli, llm, mcp, mcp-server, model-context-protocol, productivity, slack, slack-api, windsurf, ai, agents, automation, slack-integration, claude-desktop
has_wiki
homepagehttps://mcp.revasserlabs.com
has_readme
has_docs_dir
has_description

安全

可见的安全与供应链实践是否稳固,且不存在未解决的高风险司法辖区暴露?

70良好 · 占总体的 16%

安全态势

62中等
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — 无数据
2.5/2.5CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/25 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
7.5/7.5Maintained — 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
4.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
2/5Security-Policy — security policy file detected
0/7.5Signed-Releases — 无数据
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate6.2
已排除计分(无数据或不适用):branch_protection, signed_releases。 其余权重已重新归一化。
评分方式
35/35直接依赖不含已知公告 — 没有直接依赖携带已知公告
25/25间接依赖不含已知公告 — 没有间接依赖携带已知公告
0/40没有长期未处理的公告 — 没有公告带有发布日期
所用输入
sourceosv
advisories0
affected_packages0
assessed_packages95
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
已排除计分(无数据或不适用):没有长期未处理的公告。 其余权重已重新归一化。 比对的是 npm:@jtalk22/slack-mcp@4.6.0 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 95 个软件包。 未对可达性进行分析。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件?权重刻意设小(4%):代理工具链是一项真实的维护信号,但完全不具备的仓库仍可达到 100/100。

57中等 · 占总体的 4%
评分方式
45/45代理指令 — CLAUDE.md
0/15机器可读文档(llms.txt)
40/40可读的提交历史 — 68 次人类提交中有 68 次说明了意图(结构化标题或解释性正文)
所用输入
has_llms_txt
legible_history_share1
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes4,895
评分方式
0/18一条命令的引导启动
22/22自动化测试
0/11Lint / 格式化配置
0/11静态类型检查
10/10可复现环境 — Dockerfile, lockfile
2/10已体现的代理实践 — 最近 100 次提交中有 1 次由代理编写或署名代理
8/8自动化维护 — 最近 100 次提交中有 32 次为自动依赖更新
9/10OpenSSF Scorecard:Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 9
所用输入
has_nix
has_tests
lockfilespackage-lock.json
has_dockerfile
typed_language
bootstrap_files
has_devcontainer
has_linter_config
typecheck_configs
agent_commit_share0.01
toolchain_manifests
dependency_bot_commit_share0.32
评分方式
0/45可类型检查的代码 — JavaScript,未配置类型检查
55/55可控的文件大小 — 采样的 44 个源文件中有 0 个超过 60KB
所用输入
primary_languageJavaScript
largest_source_bytes42,457
source_files_sampled44
oversized_source_files0

机器可读接口

20存在风险
评分方式
0/40API 模式(OpenAPI/GraphQL/proto)
20/20MCP 服务器
0/40可运行示例
所用输入
example_dirs
has_mcp_signal
api_schema_files

关键数据

29GitHub 星标
3贡献者
306最近 12 个月提交数
2距最近推送天数
36发布版本数
1巴士系数(bus factor)
0开放议题
npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

更多细节

Star 与 Fork 历史 0 ★ / 20 ⇿
0Star
20Fork
32发布

每颗 star 和每个 fork 的添加时间,来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方,二者可相互对照:稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时,它会作为增长真实性予以报告。

0481216202022026-012026-042026-07
主版本 3次版本 9修订 20
OpenSSF Scorecard 6.2 / 10
6.2综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身,而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用,并从安全评分中剔除(绝不按零分计)。Scorecard v5.5.0 · 2026-07-30 17:27 UTC

10Binary-Artifactsno binaries found in the repo
不适用Branch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests30 out of 30 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/25 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
9Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 9
0SASTSAST tool is not run on all commits -- score normalized to 0
4Security-Policysecurity policy file detected
不适用Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
直接依赖 2
注册表软件包版本约束清单文件
npm@modelcontextprotocol/sdk^1.27.0package.json
npmexpress^5.2.1package.json
全部依赖 171

来自 GitHub 依赖图的完整解析依赖集合:2 个直接依赖与 169 个间接(传递)软件包。仓库提交锁文件时,传递闭包才是完整的。

注册表软件包版本关系
npm@modelcontextprotocol/sdk1.29.0直接
npmexpress5.2.1直接
npm@cloudflare/puppeteer1.1.0间接
npm@hono/node-server1.19.13间接
npm@puppeteer/browsers2.2.4间接
npm@tootallnate/quickjs-emscripten0.23.0间接
npm@types/node25.4.0间接
npm@types/yauzl2.10.3间接
npmaccepts2.0.0间接
npmagent-base7.1.4间接
npmajv8.18.0间接
npmajv-formats3.0.1间接
npmansi-regex5.0.1间接
npmansi-styles4.3.0间接
npmast-types0.13.4间接
npmb4a1.8.0间接
npmbare-events2.8.2间接
npmbare-fs4.5.5间接
npmbare-os3.7.1间接
npmbare-path3.0.0间接
npmbare-stream2.8.1间接
npmbare-url2.3.2间接
npmbase64-js1.5.1间接
npmbasic-ftp5.3.1间接
npmbody-parser2.3.0间接
npmbuffer5.7.1间接
npmbuffer-crc320.2.13间接
npmbytes3.1.2间接
npmcall-bind-apply-helpers1.0.2间接
npmcall-bound1.0.4间接
npmcliui8.0.1间接
npmcolor-convert2.0.1间接
npmcolor-name1.1.4间接
npmcontent-disposition1.1.0间接
npmcontent-type1.0.5间接
npmcontent-type2.0.0间接
npmcookie0.7.2间接
npmcookie-signature1.2.2间接
npmcors2.8.5间接
npmcross-spawn7.0.6间接
npmdata-uri-to-buffer6.0.2间接
npmdebug4.4.3间接
npmdegenerator5.0.1间接
npmdepd2.0.0间接
npmdevtools-protocol0.0.1299070间接
npmdunder-proto1.0.1间接
npmee-first1.1.1间接
npmemoji-regex8.0.0间接
npmencodeurl2.0.0间接
npmend-of-stream1.4.5间接
npmes-define-property1.0.1间接
npmes-errors1.3.0间接
npmes-object-atoms1.1.1间接
npmescalade3.2.0间接
npmescape-html1.0.3间接
npmescodegen2.1.0间接
npmesprima4.0.1间接
npmestraverse5.3.0间接
npmesutils2.0.3间接
npmetag1.8.1间接
npmevents-universal1.0.1间接
npmeventsource3.0.7间接
npmeventsource-parser3.0.6间接
npmexpress-rate-limit8.3.1间接
npmextract-zip2.0.1间接
npmfast-deep-equal3.1.3间接
npmfast-fifo1.3.2间接
npmfast-uri3.1.4间接
npmfd-slicer1.1.0间接
npmfinalhandler2.1.1间接
npmforwarded0.2.0间接
npmfresh2.0.0间接
npmfsevents2.3.2间接
npmfunction-bind1.1.2间接
npmget-caller-file2.0.5间接
npmget-intrinsic1.3.0间接
npmget-proto1.0.1间接
npmget-stream5.2.0间接
npmget-uri6.0.5间接
npmgopd1.2.0间接
npmhas-symbols1.1.0间接
npmhasown2.0.2间接
npmhono4.12.31间接
npmhttp-errors2.0.1间接
npmhttp-proxy-agent7.0.2间接
npmhttps-proxy-agent7.0.6间接
npmiconv-lite0.7.2间接
npmieee7541.2.1间接
npminherits2.0.4间接
npmip-address10.2.0间接
npmipaddr.js1.9.1间接
npmis-fullwidth-code-point3.0.0间接
npmis-promise4.0.0间接
npmisexe2.0.0间接
npmjose6.1.3间接
npmjson-schema-traverse1.0.0间接
npmjson-schema-typed8.0.2间接
npmlru-cache7.18.3间接
npmmath-intrinsics1.1.0间接
npmmedia-typer1.1.0间接
npmmerge-descriptors2.0.0间接
npmmime-db1.54.0间接
npmmime-types3.0.2间接
npmms2.1.3间接
npmnegotiator1.0.0间接
npmnetmask2.0.2间接
npmobject-assign4.1.1间接
npmobject-inspect1.13.4间接
npmon-finished2.4.1间接
npmonce1.4.0间接
npmpac-proxy-agent7.2.0间接
npmpac-resolver7.0.1间接
npmparseurl1.3.3间接
npmpath-key3.1.1间接
npmpath-to-regexp8.4.0间接
npmpend1.2.0间接
npmpkce-challenge5.0.1间接
npmplaywright1.61.1间接
npmplaywright-core1.61.1间接
npmprogress2.0.3间接
npmproxy-addr2.0.7间接
npmproxy-agent6.5.0间接
npmproxy-from-env1.1.0间接
npmpump3.0.4间接
npmqs6.15.2间接
npmrange-parser1.2.1间接
npmraw-body3.0.2间接
npmrequire-directory2.1.1间接
npmrequire-from-string2.0.2间接
npmrouter2.2.0间接
npmsafer-buffer2.1.2间接
npmsemver7.7.4间接
npmsend1.2.1间接
npmserve-static2.2.1间接
npmsetprototypeof1.2.0间接
npmshebang-command2.0.0间接
npmshebang-regex3.0.0间接
npmside-channel1.1.0间接
npmside-channel-list1.0.0间接
npmside-channel-map1.0.1间接
npmside-channel-weakmap1.0.2间接
npmsmart-buffer4.2.0间接
npmsocks2.8.7间接
npmsocks-proxy-agent8.0.5间接
npmsource-map0.6.1间接
npmstatuses2.0.2间接
npmstreamx2.23.0间接
npmstring-width4.2.3间接
npmstrip-ansi6.0.1间接
npmtar-fs3.1.2间接
npmtar-stream3.1.8间接
npmteex1.0.1间接
npmtext-decoder1.2.7间接
npmthrough2.3.8间接
npmtoidentifier1.0.1间接
npmtslib2.8.1间接
npmtype-is2.1.0间接
npmunbzip2-stream1.4.3间接
npmundici-types7.18.2间接
npmunpipe1.0.0间接
npmvary1.1.2间接
npmwhich2.0.2间接
npmwrap-ansi7.0.0间接
npmwrappy1.0.2间接
npmws8.21.0间接
npmy18n5.0.8间接
npmyargs17.7.2间接
npmyargs-parser21.1.1间接
npmyauzl2.10.0间接
npmzod4.3.4间接
npmzod-to-json-schema3.25.1间接
依赖安全公告 0

安装 npm:@jtalk22/slack-mcp@4.6.0 会引入 95 个包(直接与传递):其中 0 个存在已知公告,0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析,且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "claude",
        "codex",
        "copilot",
        "cursor",
        "developer-tools",
        "gemini-cli",
        "llm",
        "mcp",
        "mcp-server",
        "model-context-protocol",
        "productivity",
        "slack",
        "slack-api",
        "windsurf",
        "ai",
        "agents",
        "automation",
        "slack-integration",
        "claude-desktop"
      ],
      "is_fork": false,
      "size_kb": 128141,
      "has_wiki": true,
      "homepage": "https://mcp.revasserlabs.com",
      "languages": {
        "Shell": 9922,
        "Dockerfile": 1486,
        "JavaScript": 374396,
        "Go Template": 152008
      },
      "pushed_at": "2026-07-28T16:47:42Z",
      "created_at": "2026-01-03T19:19:56Z",
      "owner_type": "User",
      "updated_at": "2026-07-28T16:48:41Z",
      "description": "Slack for your AI agent — session tokens, not OAuth. No app to register, no admin approval. Works with any MCP client. 21 tools.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript",
        "Go Template"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "User",
      "login": "jtalk22",
      "company": null,
      "location": null,
      "followers": 2,
      "avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4",
      "created_at": "2023-08-10T05:59:22Z",
      "is_verified": null,
      "public_repos": 2,
      "account_age_days": 1085
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v4.6.0",
          "kind": "minor",
          "published_at": "2026-07-21T22:11:03Z"
        },
        {
          "tag": "v4.5.0",
          "kind": "minor",
          "published_at": "2026-07-21T21:53:40Z"
        },
        {
          "tag": "v4.4.3",
          "kind": "patch",
          "published_at": "2026-07-03T12:01:20Z"
        },
        {
          "tag": "v4.4.2",
          "kind": "patch",
          "published_at": "2026-07-02T23:39:53Z"
        },
        {
          "tag": "v4.4.1",
          "kind": "patch",
          "published_at": "2026-07-02T23:39:34Z"
        },
        {
          "tag": "v4.4.0",
          "kind": "minor",
          "published_at": "2026-06-09T14:45:43Z"
        },
        {
          "tag": "v4.3.0",
          "kind": "minor",
          "published_at": "2026-05-12T19:02:16Z"
        },
        {
          "tag": "v4.2.2",
          "kind": "patch",
          "published_at": "2026-04-26T16:08:51Z"
        },
        {
          "tag": "v4.2.1",
          "kind": "patch",
          "published_at": "2026-04-26T16:02:21Z"
        },
        {
          "tag": "v4.2.0",
          "kind": "minor",
          "published_at": "2026-04-26T15:44:44Z"
        },
        {
          "tag": "v4.1.0",
          "kind": "minor",
          "published_at": "2026-03-31T15:46:31Z"
        },
        {
          "tag": "v4.0.0",
          "kind": "major",
          "published_at": "2026-03-30T04:46:04Z"
        },
        {
          "tag": "v3.2.5",
          "kind": "patch",
          "published_at": "2026-03-12T00:25:26Z"
        },
        {
          "tag": "v3.2.4",
          "kind": "patch",
          "published_at": "2026-03-11T02:11:17Z"
        },
        {
          "tag": "v3.2.3",
          "kind": "patch",
          "published_at": "2026-03-11T00:21:01Z"
        },
        {
          "tag": "v3.2.2",
          "kind": "patch",
          "published_at": "2026-03-10T19:26:55Z"
        },
        {
          "tag": "v3.2.0",
          "kind": "minor",
          "published_at": "2026-03-10T14:40:27Z"
        },
        {
          "tag": "v3.1.0",
          "kind": "minor",
          "published_at": "2026-03-10T14:11:44Z"
        },
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2026-02-28T04:08:08Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2026-02-26T12:49:41Z"
        },
        {
          "tag": "v1.2.4",
          "kind": "patch",
          "published_at": "2026-02-26T10:35:38Z"
        },
        {
          "tag": "v1.2.3",
          "kind": "patch",
          "published_at": "2026-02-25T05:53:00Z"
        },
        {
          "tag": "v1.2.2",
          "kind": "patch",
          "published_at": "2026-02-25T05:31:17Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2026-02-24T14:28:58Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-01-22T17:36:37Z"
        },
        {
          "tag": "v1.1.9",
          "kind": "patch",
          "published_at": "2026-01-09T00:55:04Z"
        },
        {
          "tag": "v1.1.8",
          "kind": "patch",
          "published_at": "2026-01-09T00:36:28Z"
        },
        {
          "tag": "v1.1.7",
          "kind": "patch",
          "published_at": "2026-01-08T23:09:54Z"
        },
        {
          "tag": "v1.1.6",
          "kind": "patch",
          "published_at": "2026-01-08T20:33:13Z"
        },
        {
          "tag": "v1.1.5",
          "kind": "patch",
          "published_at": "2026-01-08T20:04:52Z"
        },
        {
          "tag": "v1.1.4",
          "kind": "patch",
          "published_at": "2026-01-08T13:45:12Z"
        },
        {
          "tag": "v1.1.2",
          "kind": "patch",
          "published_at": "2026-01-08T13:34:37Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-01-03T21:29:23Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2026-01-03T21:17:05Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-01-03T21:14:46Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-01-03T19:30:22Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
          "body": "The hosted section listed three inference tools (smart_search, catch_me_up,\ntriage) — the three that ship in this package as upgrade stubs. The hosted\nbrain actually runs a fourth, slack_workflow_brief, which renders a saved\nworkflow profile into a contract-validated brief and has no OSS stub.\n\nNaming it keeps the OSS and hosted surfaces telling the same story. The\ntool table is unchanged: this package still ships exactly 21 tools.",
          "is_bot": false,
          "headline": "docs(readme): name the hosted brain fourth inference tool (#195)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-28T16:47:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "640b9628a4ff7eac4f2a5612c43693143d525eb0",
          "body": "Naming another server in our own README introduces a competitor most\nreaders never knew existed — free publicity handed to a larger repo, and\nself-defeating on a page whose job is to win the reader. The differentiators\nthat block carried (automatic Chrome extraction, managed hosted OAuth,\nkeychain-o\n[…]\n in their own sections, so\nnothing substantive is lost. The How-the-Chrome-extraction-works section\nstays — that stands entirely on its own.\n\nGates: language, public-surface-integrity, drift all pass.",
          "is_bot": false,
          "headline": "docs(readme): remove the competitor-comparison block (#194)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-28T13:05:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bde8aebd43c6a0003e6b425323cc6617e3ad1e4d",
          "body": "…internals (#193)\n\nTwo positioning gaps a Show HN thread surfaces in its first comments:\n\n1. korotovsky/slack-mcp-server (the established Go server with the same\n   session-token approach) was never mentioned. Added an honest candor\n   <details> that credits its breadth (Apps, GovSlack, Group DMs) a\n[…]\nChrome exact\n   PBKDF2 then AES-128-CBC v10 scheme, linking the readable lib/token-store.js.\n\nNo tool/count changes. Banned-language, public-surface-integrity, and\ngenerated-page drift gates all pass.",
          "is_bot": false,
          "headline": "docs(readme): address the incumbent + document the Chrome-extraction …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-28T12:51:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c5b105501b7b23c8846c70ca4594d41404febff",
          "body": "Both demo wrapper pages still carried the old navy palette while the poster,\nREADME hero, and recorded demo set had moved to the near-black / coral / teal\ntriad. This aligns them.\n\n- demo-video.html: near-black ground with faint coral (left) + teal (right)\n  corner glows, replacing the navy gradient\n[…]\nzed to the brand muted token.\n\nRegenerated public/* from templates. Drift, banned-language, and\npublic-surface-integrity gates all pass. Renders verified at desktop 1440\nand mobile 390 for both pages.",
          "is_bot": false,
          "headline": "style(demo-pages): brand-align demo wrappers to poster canon (#192)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-28T12:46:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53a4a5b42e1722b9d4d19a1a69c6f04665d05729",
          "body": "… (#191)\n\nRoot cause (confirmed via live computed styles + a known-good repo): GitHub\nrenders images inside an align=center container as display:block, so every\nbadge took its own line no matter the syntax (raw HTML, single-line, or\nmarkdown all stacked). Markdown badges OUTSIDE any align wrapper render inline\nand flow — the pattern Hono and many top repos use. Moved the five badges to a\nplain markdown row above the centered hero; nbsp-joined so they never split.",
          "is_bot": false,
          "headline": "fix(readme): badges flow as one row — move out of the align container…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T23:33:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d456c3278d725d2aab769e9fd8a0457e7edd4a78",
          "body": "… (#189)\n\nRoot cause of the stacking: GitHub renders raw-HTML <img> inside the centered\nblock as display:block, so each anchor-wrapped badge took its own line no matter\nthe source formatting (confirmed via computed style on the live page). Markdown\nimage-link syntax renders the images inline in text flow — the canonical badge-row\npattern. Now one clean centered row of five.",
          "is_bot": false,
          "headline": "fix(readme): badges as markdown image-links so they flow into one row…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T23:24:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85313a2ba9295707c62883e1475ad9566458de4f",
          "body": "… (#190)\n\nReworked the demo from a flat gray chat mock into the poster in motion, shot at\nretina and kept at full resolution instead of downscaled to muddy.\n\nArt direction (templates/public-pages/demo-slack-mcp.html.tpl):\n- Palette moved off the gray mock onto the poster triad — near-black ground,\n \n[…]\n scene boundaries and expanded 6 -> 7\n(the redesign gave each tool capability its own scene; the user-lookup scene now\nhas its own chapter). JSON-LD uploadDate refreshed; PT3M24S still holds (204.8s).",
          "is_bot": false,
          "headline": "feat(demo): higher-scale brand-directed demo video + retimed chapters…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T23:15:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "778f1596fb2aebbb0d63860c573fed6ec08a6873",
          "body": "…188)\n\nThe badges were rendering one-per-line (each individually centered) because\neach anchor sat on its own source line inside the centered block. Collapsed to\na single line so they flow into one centered row, and trimmed 7->5: dropped the\nMIT and stars badges, both already shown in GitHub's own chrome (license tab +\nstar count in the repo header). Kept the five that aren't surfaced elsewhere:\nnpm version, weekly downloads, CI, MCP Registry, provenance.",
          "is_bot": false,
          "headline": "fix(readme): badges to one clean row — single source line, 5 not 7 (#…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T22:37:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba364cb2db1cfb7bb2bc6c8955e01a756e863e81",
          "body": "…d, tighter crop, wider display (#187)\n\nThe GIF opened on a title card cropped from the poster's 47->0 band — so the\nreader met the same big idea twice within 30 lines, then the session text\nrendered ~8px, illegible. Re-cut: no title card (starts on the real session,\nde-duped), tight content crop dropping the window chrome and dead margins,\n1120px source displayed at 900px. Every line now reads — the tool names, the\nunread counts, the briefing. 122KB, loops, end-freeze on the briefing.",
          "is_bot": false,
          "headline": "fix(readme): legible watch-it-run GIF — drop the poster-dup title car…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T22:32:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c24f836b4cde6aacb215ba815a1fa98711ee827",
          "body": "… pile (#186)\n\nThe CI badge (github-native SVG) and the stars badge (style=social) were\ndifferent heights from the flat shields, so the 7-badge row cascaded into a\ndiagonal staircase. All seven now render flat-square at one height and wrap\ninto a clean centered row. CI switched to the shields status endpoint for the\nsame reason; stars href stays repo-root (not /stargazers — that 404s).",
          "is_bot": false,
          "headline": "fix(readme): uniform flat-square badges — kill the staggered masthead…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T22:17:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1a1b89822ca0fd7455081326db207aa32ff8284",
          "body": "…voice (#185)\n\nThe package already ships SLSA provenance attestations (verified live on\n4.6.0) but nothing advertised it. For a tool you hand a live session cookie,\na verifiable supply chain is the strongest honest credibility signal there is.\n\n- Masthead: 'provenance signed' badge (teal), anchors t\n[…]\n\n- package.json: funding field (GitHub Sponsors) so npm surfaces the fund link\n\nNo rename: keeping @jtalk22/slack-mcp — the 4.7k/mo downloads are earned proof\na fresh package name would reset to zero.",
          "is_bot": false,
          "headline": "feat(readme): surface signed provenance + npm funding, sharpen trust …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T20:53:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "30df7d565142d14920c921bef91296e15ce35380",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove stray verification screenshots from repo root (#184)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T20:04:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07d2ffb02e94380c5f9c608720e85d7ce34117e0",
          "body": "Native cue rendering drew full-size captions over the video controls on the\nmuted autoplay hero. Track stays for accessibility; default off. The\ndemo-video page keeps captions default-on (user-initiated viewing).",
          "is_bot": false,
          "headline": "fix(landing): captions opt-in on the autoplay hero (#183)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T20:01:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed8f7f0932ba9f62fc17fa3520a228d1c39ee1e8",
          "body": "…badge, crawl files (#182)\n\n- Landing palette retuned from navy-blue drift to the poster triad:\n  near-black surfaces, coral accent, teal links/highlights — one token map,\n  every hex accounted for\n- Hero shell now plays the full re-mastered landscape clip with the 47->0\n  poster as its cover (was: \n[…]\n the retimed cue file\n- README: npm weekly-downloads badge (real, earned proof) + honest pointer\n  to the prompt-recipe doc from the Workflows section\n- robots.txt + sitemap.xml for the Pages surfaces",
          "is_bot": false,
          "headline": "feat(landing): poster-triad palette, full landscape hero clip, proof …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T19:57:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "455c15d9480d2e86332d6509a0ce5230d9827589",
          "body": "- lib/public-pages.js:40 (landing self-host card) was a third note string\n  missed by #177 — now matches the canon six-client list\n- Landing title claimed a 30-second install while the audited claim\n  everywhere else is ~2 minutes — retitled to the positioning line, which\n  also puts the agent phrasing in the SEO title",
          "is_bot": false,
          "headline": "fix(pages): landing client list to canon, honest title (#181)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T19:52:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f259fb86752dbae928441fcd6c50a22203e7ae9a",
          "body": "…es, CI-gated claims, demo re-capture (#180)",
          "is_bot": false,
          "headline": "docs: record repo gotchas — branch naming vs guardrail, generated pag…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T18:46:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "866a73fc09c0575087fc67cf745ecc6017f61c9e",
          "body": "Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [docker/login-action](https://github.com/docker/login-action).\n\n\nUpdates `actions/checkout` from 7.0.0 to 7.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://gi\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the actions group with 2 updates (#176)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-27T18:43:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c320a4e1e18c1bc4de46eb9c8b8b9d9fc2f04362",
          "body": "Salvaged from the 2026-05-26 review-workflow branch with both action pins\nrefreshed to current (checkout to the repo-wide v7 pin, the review action\nto the latest v1 SHA). Fires on @-mentions in issues, PR comments, and\nreviews; read-only permissions plus actions:read for CI results. Uses the\nrepo OAuth token secret set 2026-05-26. Draws on the monthly cloud review\ncap.",
          "is_bot": false,
          "headline": "ci: add mention-triggered review workflow (#179)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T18:41:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36cc13bee778ffb55b81e0c1448d02b4faad87cb",
          "body": "…ening pass (#178)\n\n* docs(assets): replace near-black hero-demo.gif with legible watch-it-run.gif\n\nNew GIF: morning-triage arc 0:12-41.4 at 2x, chrome-cropped (1.27x effective\ntype scale), designed first frame held 1.2s (poster 47->0 band, no play glyph),\nend-freeze on the completed briefing. 148 f\n[…]\nce write-path tool' so the\n  local-write tools (workflow_save, refresh_tokens) are not implied\n- docs/SETUP.md 'Hosted (Coming Soon)' was stale — hosted is live with a\n  free tier; aligned with README",
          "is_bot": false,
          "headline": "docs(readme): poster hero restored + legible watch-it-run GIF + sharp…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T18:31:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eff0991e8317d48c9b3eb40a4b6ac906d6070f1f",
          "body": "… broadening (#177)\n\n- demo-video: 6 chapter pills (data-t seek+play via one delegated listener,\n  timeupdate active-state, teal active) — makes the README chapters claim true\n- client canon (shareNote/demoNote): drop the one client name claimed nowhere\n  else, add the two CLI clients the README table already lists\n- share.html masthead: agent-neutral wording; tool phrasing aligned to 12/4/2/3\n- regenerated outputs committed alongside templates + lib",
          "is_bot": false,
          "headline": "feat(pages): demo-video chapter pills + client canon + share masthead…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-27T18:06:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee014594566b4d0966d61d43476b7b0b2baef04a",
          "body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n  dependency-version: 3.1.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump fast-uri from 3.1.2 to 3.1.4 (#175)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T03:18:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f9ed9469bdcb643eaca9365e49600be9f1c6ac9",
          "body": "…urns 404 for this repo (verified in a real browser) (#174)",
          "is_bot": false,
          "headline": "docs(readme): star links point at repo root — the stargazers page ret…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-22T21:18:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4374f6acb87536ae713e4548bcd391edcb89adb",
          "body": "…redesign (#173)\n\n- Centered masthead: title, tagline, badges + social-stars, kbd client-chip row, hook line with the honest verb (borrows).\n- Animated hero: 800px 2.4MB GIF cut from the full demo (unread census with live counts, tool call, morning briefing) grafted to the closing card (0 unreads / \n[…]\nll test. Centered anchor nav + centered star-CTA footer.\n- Repo description + topics updated out-of-band (free surface, no checker reads it).\n- Public-surface-integrity guard: all checks pass locally.",
          "is_bot": false,
          "headline": "docs(readme): centered masthead, animated hero, candor block, poster …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-22T20:50:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d7a0fbd29246cf9fe5728a2fabb9ad536073537a",
          "body": "…ade hook, panache (#172)\n\n* docs(readme): deep rework for impact — consolidate duplicated per-client install blocks into one section, unify scattered pricing into a single hosted table, sharpen hero and section flow; all links, anchors, and substance preserved (460 to 391 lines)\n\n* docs(readme): pa\n[…]\nRestore the count literals the public-surface-integrity guard asserts (21 tools / 12 read-only / 4 write-path) that prior bold markup had split.\n- Local guard green: all 22 public-surface checks pass.",
          "is_bot": false,
          "headline": "docs(readme): deep rework — broaden scope past a single client, HN-gr…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-22T19:24:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ac3958218b44e176e20958fd58ad63a3820f533",
          "body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump body-parser from 2.2.2 to 2.3.0 (#167)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T22:13:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d39d1a8af512a2e198b622133a1afa2c176f673",
          "body": "Workspace profiles (SLACK_MCP_PROFILE / --profile, closes #164): every\nstorage surface — token file, metadata sidecar, write lock, Keychain\nservice — gets its own namespace so multiple server instances run\nside-by-side without sharing credentials. Fail-closed name validation;\nreported via storage.pr\n[…]\n a\ngenuine v10-encrypted cookie + LevelDB token log) driving the actual\nextraction pipeline, and profile-namespace isolation tests including\nCLI flag plumbing and fail-closed startup. Suite: 57 tests.",
          "is_bot": false,
          "headline": "v4.6.0: workspace profiles + Chrome extraction overhaul (#170)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-21T22:10:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a7efac3472b7fa4b07a8c0c7ea719655413d70d",
          "body": "…-process write lock (#169)\n\nVersion bump across the four parity surfaces + CHANGELOG release entry.\nFeature content merged via #163 (closes #162).",
          "is_bot": false,
          "headline": "v4.5.0: keychain-only credential storage, fail-loud guarantees, cross…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-21T21:53:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8590b5ce8ff57610c8ae69d23b44389c32b20ab",
          "body": "…#163)\n\nOpt-in keychain-only storage: credentials live exclusively in the macOS Keychain, no plaintext token file, verified writes, fail-loud plaintext removal, in-memory fallback for failed persists, cross-process write lock for sidecar metadata, hardened setup wizard and token CLI, storage-modes diagram. All adversarial-review findings addressed with regression tests (44 total).",
          "is_bot": false,
          "headline": "Keychain-only credential storage via SLACK_MCP_TOKEN_STORAGE (#162) (…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-21T21:50:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab89508e1b490d310801b41a7e5504f82e5d45c7",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.26 to 4.12.31.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.26...v4.12.31)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.31\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.26 to 4.12.31 (#166)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T21:17:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cc4f9f57d01867e10839bd0dabfdb71fd695913",
          "body": "Bumps the actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).\n\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9\n[…]\npe: version-update:semver-major\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/setup-node in the actions group (#165)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T21:15:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc703e9bd1b5bb137b3793c2fbf987b0bce3fc95",
          "body": "… (#158)",
          "is_bot": true,
          "headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T10:48:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e3c9abec2b4f7b2bd94459bf34f2e52ca823b33",
          "body": "…x (#161)\n\nPush runs assert the page against live upstream truth; release-published runs (new trigger) assert strict convergence. Review follow-ups: optional chaining, numeric 401, unified response helper. Landing-page tile reads the v5 hosted status tools shape (fixed at the template source; local fixture now mirrors the live contract). Transitive ip-address overridden to a patched version (alert 20).",
          "is_bot": false,
          "headline": "Smoke two-invariants split + review follow-ups + cloud-health tile fi…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-03T12:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eeb8773455c59dee4bc40406ed2f07a7bcb9a231",
          "body": "Detect Slack session-token death in both transports + health check and return recovery guidance (self-fix first, hosted second; throttled; SLACK_MCP_NO_UPSELL opt-out). Sweep every live public surface from the retired 9/mo tier to the live tiers: Free 2,000 req + 25 tool calls/mo; Pro 19/mo, 190/yr; Team 49/mo, 490/yr; Safeguard 199 waitlist. Version 4.4.3 across all four manifests.",
          "is_bot": false,
          "headline": "4.4.3 - Lifeboat token-death recovery + live market-tier pricing (#160)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-03T11:21:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6826459764b77254214e77dd10b11d9d72c535dc",
          "body": "…#157)\n\nReleases now publish the MCP registry entry from CI via GitHub Actions OIDC, removing the interactive device-flow login. Guards: server.json/tag version parity, registry-existence skip (with explicit failure on lookup errors), and an npm propagation wait.",
          "is_bot": false,
          "headline": "ci(publish): publish to the MCP registry via GitHub OIDC on release (…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-02T23:50:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd935040220ad3d3cb553026595a0bd9d79d6ae6",
          "body": "…xtraction robustness (#156)\n\nChangelog entries for 4.4.1 and 4.4.2; version aligned across package.json, server.json, glama.json.",
          "is_bot": false,
          "headline": "release: 4.4.2 — transport dispatch parity, worker contracts, token e…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-02T23:08:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc7fcef137e3f976ec098674d66b3129e844a705",
          "body": "…ess, page hardening (#155)\n\n* fix(content): purge remaining Q2-2026 rollout claims from live surfaces\n\nReplaces 'rolling out Q2 2026' with 'in development' in the live tool\npayload (lib/handlers.js), tool description (lib/tools.js), public-page\nsources (lib/public-pages.js, templates/public-pages/d\n[…]\nith\nhttps:// (falling back to the canonical docs URL). Fixed in the\ntemplate source and regenerated the derived index.html.\n\n* perf(worker): resolve unread-DM display names concurrently; tidy comments",
          "is_bot": false,
          "headline": "fix: tool dispatch parity, worker contracts, token extraction robustn…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-02T22:52:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e6e304a62954929860d7be4bacb9562cbeff6ad",
          "body": "…ical description (#154)\n\nQ2 2026 is over: every shipped surface (package/server/glama descriptions, README x3, TROUBLESHOOTING, support-triage template) now says the morning catch-up DM is in development — same truth-pass as the hosted page. One canonical <=100-char description across package.json/server.json/glama.json (registry schema now enforces the cap; surface-integrity check enforces parity).",
          "is_bot": false,
          "headline": "fix(release): 4.4.1 — purge stale Q2-2026 rollout claims; unify canon…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-07-02T21:17:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a6a079ba43cbd944a382aee1e61231152510c3d",
          "body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1)\n\n---\nupdated-d\n[…]\npe: version-update:semver-patch\n  dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump playwright in the npm-all group (#153)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-26T10:34:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "607ce5db7d3c486213861f3321fda3c151827b1e",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.26)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.26\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.23 to 4.12.26 (#151)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T10:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c52cfe94c4cb1840fa9f41a84dcb86703d9e1aa4",
          "body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n  dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump playwright in the npm-all group (#150)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T10:34:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b57674ebe6e7b3af1f4d9dc4963bb04108cdf47a",
          "body": "Bumps node from 25-alpine to 26-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n  dependency-version: 26-alpine\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump node from 25-alpine to 26-alpine (#131)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T16:12:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dd91d6651bce16aadbad8539233e8c0eaa5aaa8",
          "body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.\n- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.1.0...v10.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: ip-address\n  dependency-version: 10.2.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump ip-address in /workers/browser-ops (#129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T15:46:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fbdda94b6a20d7a3f2704370b733ee4e4d547bc",
          "body": "…metadata orthogonality)",
          "is_bot": false,
          "headline": "test: add tool-schema test (rich-fields on 4 read tools; include_all_…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T15:24:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5279f7e2dcd2f68c711a52ca986ac2beacd7f147",
          "body": "…LI install one-liner",
          "is_bot": false,
          "headline": "fix(lint): neutral ROADMAP wording; sync package-lock to 4.4.0; add C…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72e7aafe9c9c56dd5cc2ce999c3e89ecca2dc164",
          "body": "…ields section",
          "is_bot": false,
          "headline": "docs: terse technical 4.4.0 changelog; before/after example in rich-f…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebe7922c4933d823ad12dfe27ff1130c1a8a18e1",
          "body": "….0 = update/delete message)",
          "is_bot": false,
          "headline": "docs: surface include_rich_message_fields in README; add ROADMAP (4.5…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7186f8fb95eeb4830090617be88d30f3895444d9",
          "body": "…_fields), first unit tests; credit @rvandam (#143)",
          "is_bot": false,
          "headline": "release: cut 4.4.0 — rich message fields (opt-in include_rich_message…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bcddef52833a8375a0684eb33550f39346df2ae",
          "body": "(A) The 'Validate release and issue templates' step grep'd the ENTIRE file when a\ncomms template (incl. CHANGELOG.md) changed. CHANGELOG.md has frozen historical\nrelease notes that legitimately name tool brands, so any commit touching it\nred-mained the branch on content nobody changed. Narrow the sc\n[…]\ng email on any non-fork event\n(e.g. a same-repo push) still fails closed.\n\nBanned-token regex byte-for-byte unchanged; per-commit message enforcement and the\nregression-check anchor strings untouched.",
          "is_bot": false,
          "headline": "Harden attribution guard: scan added lines only + legible fork-PR path",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:03:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7bbbb5fa4921595c1ce567d85f8e7cecd135ff78",
          "body": "Absorbs PR #143 by @rvandam: surface message content Slack stores outside\n`text` -- attachments, blocks, metadata, files, reactions -- behind an opt-in\n`include_rich_message_fields` flag, plus an `include_all_metadata` passthrough,\nacross conversations.history, get_full_conversation, search.messages\n[…]\nts (helper + tool-schema) and wire `npm test` into CI\n- credit @rvandam in CONTRIBUTORS and this commit; document the absorb-and-credit\n  policy in CONTRIBUTING so the attribution check is no surprise",
          "is_bot": false,
          "headline": "Add opt-in rich Slack message fields (#143)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-09T14:03:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac13a0ae0539e0c8d97106e57bd64611a9fc87b4",
          "body": "… (#145)\n\nBumps the actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.0.3` |\n| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` |\n| [docker/\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the actions group across 1 directory with 6 updates…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T11:33:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "beeaab0d1f6e24dc3ca02493f13287b6b39f8ef9",
          "body": null,
          "is_bot": false,
          "headline": "Improve public site SEO and accessibility (#146)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-06-08T22:52:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "504ccfe2a9e19645234d92ab348dfa35fdf3fbeb",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.23\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.18 to 4.12.23 (#144)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T20:50:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aaf7a2f9bea43abcf2fad6ce5fd0c471e59c03fc",
          "body": "…140)\n\nBumps [ws](https://github.com/websockets/ws) from 8.19.0 to 8.21.0.\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/8.19.0...8.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: ws\n  dependency-version: 8.21.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump ws from 8.19.0 to 8.21.0 in /workers/browser-ops (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-24T15:47:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5fb20b2f69e14d73723a0511aa5ab7963f51d638",
          "body": "Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.14.2...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n  dependency-version: 6.15.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump qs from 6.14.2 to 6.15.2 (#139)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-23T19:27:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d01751e29a82d656b2caf1c17e41fee75797afe2",
          "body": "Bumps the npm-all group with 1 update: [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `playwright` from 1.59.1 to 1.60.0\n- [Release notes](https://github.com/microsoft/playwright/releases)\n- [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0)\n\n---\nupdated-d\n[…]\npe: version-update:semver-minor\n  dependency-group: npm-all\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump playwright in the npm-all group (#137)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-15T10:38:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33b0b2dfee8965ed14c58f8f8ba2115559cff489",
          "body": null,
          "is_bot": false,
          "headline": "chore(changelog): backfill v4.2.0 through v4.3.0 compare links (#136)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-05-12T20:01:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fd4ca3f61e8f52810145a4f8748ab4de787c001",
          "body": "…nt (#135)\n\n- New `--refresh-tokens` CLI flag (src/cli.js, 4 lines) maps to\n  scripts/token-cli.js auto, enabling `npx -y @jtalk22/slack-mcp\n  --refresh-tokens` as a clean one-line LaunchAgent invocation.\n- docs/SETUP.md: new \"Keep Tokens Fresh\" section with a macOS\n  LaunchAgent template that runs \n[…]\nd 4.2.2 -> 4.3.0.\n- SETUP troubleshooting: \"Verify path to server.js\" -> \"Verify\n  JSON syntax in your client's MCP config\" (npx-canonical).\n- .gitignore: three local-only release/sync helper scripts.",
          "is_bot": false,
          "headline": "v4.3.0: --refresh-tokens flag + LaunchAgent docs + tool-count alignme…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-05-12T19:01:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23b2f5230d78b0fcd23a8c7a00742377ccad7418",
          "body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n  dependency-version: 3.1.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#134)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-09T02:34:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92e53f3c89ab64b40df94d8e1d883f14f9f3db27",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.14 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.14...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.18\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.14 to 4.12.18 (#133)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-08T15:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "094308d4796eecda851840ae290ffbfe7638b264",
          "body": "…ps (#132)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.3.0 to 5.3.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n  dependency-version: 5.3.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump basic-ftp from 5.3.0 to 5.3.1 in /workers/browser-o…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-08T12:46:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c88aef68ea822028b7893ff3bf2f4c9bbfcdf6e6",
          "body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.7 to 1.1.0\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-minor\n  dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump @cloudflare/puppeteer (#128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-02T13:01:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fda6532f67e7f7eb5a09c5e8383a5c7bbaf80d8f",
          "body": "User flagged the README diagram's Step 3 box as the \"session token thing\nthat needs polishing.\" Two issues addressed:\n\n1. \"Full Access\" headline + tiny \"SESSION TOKEN\" sub-badge was awkward.\n   The badge was 74×16px at font-size 8 — the artifact name was visually\n   subordinate to a generic \"Full Ac\n[…]\nd).\nREADME.md is in the package but its text doesn't change. GitHub\nrewrites relative image paths to raw.github.com when rendering on\nnpmjs.com, so the polish is visible there too without a republish.",
          "is_bot": false,
          "headline": "docs(diagram): polish session-token framing + remove dead text (#127)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-26T16:33:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "75f584b761a06f18c17f066f122e0f7b1d71ee4c",
          "body": "…126)\n\nAgentScore advisory AGENTSCORE-2026-0016 flagged v4.2.0 for `command_injection: shell execution with template literal input` (90→80, LOW→MODERATE). Static-analysis false positive — both flagged sites use hardcoded internal constants (KEYCHAIN_SERVICE = \"slack-mcp-server\" in lib/token-store.js\n[…]\n across package.json, server.json (top-level + packages[0].version), glama.json. package-lock.json regenerated.\n\nCompanion: AgentScore re-scan should restore LOW after publish.yml fires on v4.2.2 tag.",
          "is_bot": false,
          "headline": "v4.2.2: harden shell-exec surface — argv arrays + native chmodSync (#…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-26T16:08:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4e0e59fc47c798a8e34a5f048c67e48617ef08d",
          "body": "…rewrite (#125)\n\n* v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff rewrite\n\nTwo real honesty drifts surfaced post-v4.2.0 publish:\n\n1. npm registry hard-truncated `description` at 255 chars on publish.\n   Local was 264 ending \"…rolling out Q2 2026).\" → registry-stored copy\n   was\n[…]\nls (4th tool was the morning DM, which isn't a\ntool, it's a scheduled job — same caveat that drove this whole sprint).\n\n* fix(lockfile): regen package-lock.json for 4.2.1 — ci public-surface-integrity",
          "is_bot": false,
          "headline": "v4.2.1: honesty patch — npm description ≤250 chars + Honest tradeoff …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-26T16:01:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2883da4b0737a3102f041d9167208df6c47392cb",
          "body": "…esty caveat (#124)\n\nDrafts release notes modeled on RELEASE-NOTES-v4.1.2.md structure:\nworkflow primitives, workflow_kind taxonomy, 6 templates, 3 hosted\nupgrade stubs, v5 hosted pricing, explicit \"Stream C morning-DM rolls\nout in v4.3.0 (Q2 2026)\" note.\n\nAdds \"(rolling out Q2 2026)\" caveat to ever\n[…]\n Pro at \\$9\nper month unlocks unlimited tooling, permanent OAuth, 90-day\nVectorize, 2 workspaces.\n\nSmoke regex still matches because the phrase is preserved verbatim --\nonly the caveat is added after.",
          "is_bot": false,
          "headline": "docs(v4.2.0): publish prep — RELEASE-NOTES-v4.2.0.md + morning-DM hon…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-26T15:43:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6af1a03d745a7685ef3ca477c2d7747f2c087cb9",
          "body": "…h (#123)\n\nv4.2.0 release: workflow profile primitives, paid hosted stubs, 6 prebuilt templates, visual polish.\n\nHighlights:\n- 21 tools (12 read-only Slack + 4 write-path + 2 workflow profile primitives + 3 hosted upgrade stubs)\n- workflow_kind taxonomy: incident_room, exec_brief, support_inbox, pro\n[…]\nase-preflight env mirror CI's ALLOW_GITHUB_WEB_COMMITTER=1\n\nVerified: 7/7 CI checks green. npm pack: 33 files, 83 kB, version 4.2.0. npm publish to @latest is a separate step (release: created event).",
          "is_bot": false,
          "headline": "v4.2.0: workflow primitives + paid stubs + 6 templates + visual polis…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-25T21:22:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b2cb361fcc937e2affb677424b8a314b02534cba",
          "body": "… (#109)\n\nBumps the npm-all group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [express](https://github.com/expressjs/express) and [playwright](https://github.com/microsoft/playwright).\n\n\nUpdates `@modelcontextprotocol/sdk` f\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the npm-all group across 1 directory with 3 updates…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-25T17:51:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "34cdb27b94aa3e92340a30582c79b115a52a0634",
          "body": "… (#122)\n\nBumps the actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](ht\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the actions group across 1 directory with 4 updates…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-25T17:45:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b285a2b9ce23556cea4cc3f052810957ed38d5a1",
          "body": "…ps (#119)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.2 to 5.3.0.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: jtalk22 <141901428+jtalk22@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump basic-ftp from 5.2.2 to 5.3.0 in /workers/browser-o…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-25T17:40:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b50bf4e674cf7948284bb0293250e4a39b3c837f",
          "body": "* v4.1.1: error surface hardening + auto-heal telemetry\n\nClose the signal-path gap from \"background auto-heal failed\" to\n\"user sees actionable next_action\". A 12-day stale token file\npreviously surfaced a generic tool_call_failed with no route to fix.\n\n- token-store: getStoredTokens passes telemetry\n[…]\nns. The ripgrep path was correct but the GitHub runner does not\npreinstall ripgrep, so the looser fallback was actually the active CI path.\nBoth paths now honor word boundaries and behave identically.",
          "is_bot": false,
          "headline": "v4.1.2: leveldb token extraction + multi-profile + zombie fix (#117)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-24T15:36:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72e795327ce0b68bc7dcbb55a57112d36b19b0ac",
          "body": "Governance files installed per /tmp/repo-audit/phase4/:\n-   - dependabot.yml existing (pre-audit), PRESERVED\n  - auto-merge.yml existing (different), PRESERVED\n  - CODEOWNERS NEW\n  - REPO.md written\n\nSee revereveal/.github for org-level governance docs (REPO-standard,\nbranch-naming-convention, archival-policy, anti-recommendations).\n\nGenerated by repo-audit-2026-04-18 sweep.",
          "is_bot": false,
          "headline": "chore(audit-2026-04-18): install governance baseline (#120)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-04-18T16:22:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26a7c918512b893f0b14706ad51bc859fa21f3ed",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.14\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.12 to 4.12.14 (#118)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-16T03:04:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15adeecef3d2badec54cc75dd0d8ee128e4f6719",
          "body": "…ps (#116)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.1 to 5.2.2.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n  dependency-version: 5.2.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /workers/browser-o…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T21:42:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f8faba24d89b730118000d4150202db4899748d",
          "body": "Bumps the browser-ops group in /workers/browser-ops with 1 update: [@cloudflare/puppeteer](https://github.com/cloudflare/puppeteer).\n\n\nUpdates `@cloudflare/puppeteer` from 1.0.6 to 1.0.7\n- [Release notes](https://github.com/cloudflare/puppeteer/releases)\n- [Commits](https://github.com/cloudflare/pup\n[…]\nversion-update:semver-patch\n  dependency-group: browser-ops\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump @cloudflare/puppeteer (#114)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T10:37:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9cedd091b36524069c82ecba9480fabf2cf23dc9",
          "body": "…ps (#113)\n\nBumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.0 to 5.2.1.\n- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)\n- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/patrickjuchli/basic-\n[…]\nftp\n  dependency-version: 5.2.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump basic-ftp from 5.2.0 to 5.2.1 in /workers/browser-o…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T20:59:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dfb2a515e65e29ee8dc631975fe358a4ee14ff34",
          "body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.7 to 4.12.12.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.7...v4.12.12)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n  dependency-version: 4.12.12\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump hono from 4.12.7 to 4.12.12 (#112)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T06:12:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05ba6ca32de443847c5abbfd06f4d1ce5557b64b",
          "body": "Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.11 to 1.19.13.\n- [Release notes](https://github.com/honojs/node-server/releases)\n- [Commits](https://github.com/honojs/node-server/compare/v1.19.11...v1.19.13)\n\n---\nupdated-dependencies:\n- dependency-name: \"@hono/node-server\"\n  dependency-version: 1.19.13\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump @hono/node-server from 1.19.11 to 1.19.13 (#111)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T04:36:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "745a2f1bad946b915220c69c5f4722e09e93012d",
          "body": "* fix: regenerate poster with subtle bottom-left play button\n\nOld poster had large centered opaque play button blocking hook text.\nNew: 44px, 35% opacity, bottom-left with backdrop blur.\n\n* copy: new demo tagline — jammed printer, quit six months ago, still in #facilities\n\n* copy: quit -> left",
          "is_bot": false,
          "headline": "fix: subtle bottom-left play button on README poster (#107)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T23:11:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9945493bdd8db713e0aba8a519386121a90649b",
          "body": "* fix: extract HttpOnly session cookie from Chrome encrypted DB\n\nSlack now marks the d session cookie as HttpOnly, which means\ndocument.cookie cannot access it. This broke token extraction for\nall users on all platforms.\n\nFix: Read Chrome SQLite cookie database directly, decrypt using\nthe Chrome Saf\n[…]\ne now shows 'Hosted docs'.\n\n* fix: sync package-lock version to 4.1.0 + update smoke test assertions\n\npackage-lock.json was stuck at 4.0.0.\nBrowser smoke assertions updated to match current page copy.",
          "is_bot": false,
          "headline": "v4.1.0: Chrome DB decryption, stealth mode, video polish (#106)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T15:45:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "314b8f3c890e747ee80e912687564cd12472250f",
          "body": null,
          "is_bot": false,
          "headline": "docs: rewrite show hn post with full shipped scope (#105)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T10:26:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36caf93640a11ebe63d3d1a078ca0f0bdd43a845",
          "body": null,
          "is_bot": false,
          "headline": "docs: fresh video, poster, and screenshots (#104)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T10:23:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "636f1a0bff09ca261b88b6c4f38e5105ca2f558c",
          "body": "… (#103)",
          "is_bot": false,
          "headline": "ux: one-liner token extractor in setup wizard, sequential png capture…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T10:05:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "458eed0489ae9245db1ac4dae7b946bd72a2a50e",
          "body": "… play button fix (#102)",
          "is_bot": false,
          "headline": "feat: bookmarklet extractor, multi-client configs, hq video pipeline,…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T09:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56455fa8723d6ab8741efd38599eebbc8f45baff",
          "body": "…le, smoke fix (#101)",
          "is_bot": false,
          "headline": "traction: landing page hero, npm discovery, changelog, comparison tab…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-31T09:11:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4caa3f2c058c0fc13855977ec39da7c4daa92854",
          "body": null,
          "is_bot": false,
          "headline": "docs: fresh assets with h264 video and play button poster (#100)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T22:34:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "833884db567979b957396e6030aa02012efacc06",
          "body": null,
          "is_bot": false,
          "headline": "polish: h264 video, play button poster, css fixes, schema.org (#99)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T16:28:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2176e66c6ff57f8c5907d48c0e1e92a7e540acb0",
          "body": "Sets speed to 0.5x before autoplay so title card stays visible for 6 real seconds. Screenshot captures at 4s with full stagger animation complete and 2s buffer before card disappears.",
          "is_bot": false,
          "headline": "fix: poster captures title card at 0.5x speed (#97)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T15:47:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea95daac25276684d1ce398313f42cd8310ab214",
          "body": "…(#96)\n\nLanding page: updated copy and OG tags, streamlined CTAs, accent color matches demo. Contributing guide expanded. README demo link fixed. Social preview 2x DPI. Mobile clip starts from title card. Deleted .coderabbit.yaml. Template synced.",
          "is_bot": false,
          "headline": "polish: landing page, title card poster, contributing guide, quality …",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T15:35:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aae0eb6867f6b86e44130bb164bdb93569776563",
          "body": "…#93)\n\nDiagram SVG redesigned to match demo palette (orange/grey instead of red/teal). Poster captures first tool result (unreads list visible) instead of empty chat. README adds play link and printer PIN reference. Social preview and mobile clip regenerated from Monday Morning video.",
          "is_bot": false,
          "headline": "docs: diagram redesign, poster shows tool results, refreshed assets (…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T14:08:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b1e4ad7f8cca0fc1df3ead50d9e799be10dc5d5",
          "body": "Fresh Monday Morning demo video (9MB) and screenshots recorded on M4 Max with the 7-scenario narrative.",
          "is_bot": false,
          "headline": "docs: fresh Monday Morning demo video and screenshots (#92)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T13:47:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc095209f9b4bd01a750bfd0e5b4311a480688fd",
          "body": "…y, fresh video + repo cleanup (#91)",
          "is_bot": false,
          "headline": "docs: Monday Morning demo — 7 narrative scenarios, printer PIN myster…",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T13:06:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd9c096f77ab3ddfb5d41bf31c9f10fb9e5ccd3d",
          "body": "* docs: fresh demo assets recorded on M4 Max\n\n* docs: fresh demo assets recorded on M4 Max",
          "is_bot": false,
          "headline": "docs: fresh demo assets from M4 Max (#89)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T10:13:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a23f55f3b8006ec138b15978f7b3f70f9ad37bef",
          "body": "* docs: v4.0.0 demo improvements, CI fixes, health endpoint, OG tags, README poster\n\n* chore: self-host fonts for consistent rendering",
          "is_bot": false,
          "headline": "docs: v4.0.0 demo — fresh assets, viral embed tags (#87)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T09:42:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63d68038ef91c3ab47ae910ebc2a4dd21f5aa8ee",
          "body": "- Rewrite README: pain-first opener, inline install, demo GIF, OAuth diagram\n- Add v4.0.0 CHANGELOG, SECURITY.md update, release notes\n- Update Cloudflare worker to v4.0.0 with 16 tools\n- Fix browser-smoke assertions for v4.0.0 page content\n- Clean attribution markers from CHANGELOG",
          "is_bot": false,
          "headline": "release: v4.0.0 preparation (#84)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T04:37:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "499ea096c350d3e9888078f2e859cf04659ab8eb",
          "body": "- public-metadata.js: 107 → 22 lines, removed UTM tracking and pricing\n- public-pages.js: removed sales funnel, simplified to product links\n- package.json: removed dead scripts for deleted tools\n- check-public-surface-integrity.js: simplified for v4.0\n- check-version-parity.js: fixed output path\n- Regenerated all public HTML pages",
          "is_bot": false,
          "headline": "chore: strip commercial tracking URLs and simplify public pages (#82)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T02:51:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f6b99cb66a1616a834ffcb114324823b72d452c",
          "body": "* fix: use fs.chmodSync and add input bounds\n\nReplace execSync shell calls with fs.chmodSync for file permissions.\nRedact full API key from web server console output.\nAdd safeParseInt helper with radix and upper bounds for query params.\n\n* chore: remove internal ops docs\n\nRemove commercial surface m\n[…]\nity.js to stop reading deleted\nfiles (distribution ledger, launch ops). Replace stale version\nchecks with core documentation link validation.\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Simplify repo: remove ops docs and automation scripts (#81)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-30T02:02:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d9b1e593bf63fd497ae59cc801946ec08ba6c995",
          "body": "Bumps  and [path-to-regexp](https://github.com/pillarjs/path-to-regexp). These dependencies needed to be updated together.\n\nUpdates `path-to-regexp` from 8.3.0 to 8.4.0\n- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)\n- [Changelog](https://github.com/pillarjs/path-to-regexp/blo\n[…]\nxp\n  dependency-version: 0.1.13\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump path-to-regexp (#80)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-30T01:54:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e06d10a68e56b0f6c3881a1bf2a74d78afc1278a",
          "body": "Bumps the actions group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` |\n| [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.3.0` |\n| [dependabot/fetch-metadata](https://github.com/de\n[…]\npe: version-update:semver-major\n  dependency-group: actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the actions group with 6 updates (#76)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T07:04:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "782910c056e4706ab0593ee97101c4bd07b45825",
          "body": "Bumps node from 22-alpine to 25-alpine.\n\n---\nupdated-dependencies:\n- dependency-name: node\n  dependency-version: 25-alpine\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump node from 22-alpine to 25-alpine (#79)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T07:01:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9faf01daabb79c97973439c599f9aa4c10de3750",
          "body": null,
          "is_bot": false,
          "headline": "chore(server): tighten proof and dependabot hygiene (#78)",
          "author_name": "jtalk22",
          "author_login": "jtalk22",
          "committed_at": "2026-03-20T00:39:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 36,
      "commits_last_year": 306,
      "latest_release_at": "2026-07-21T22:11:03Z",
      "latest_release_tag": "v4.6.0",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 26,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 9.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@jtalk22/slack-mcp",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "claude",
            "mcp",
            "model-context-protocol",
            "slack",
            "slack-api",
            "claude-desktop",
            "cli",
            "developer-tools",
            "mcp-server",
            "session-based",
            "claude-code",
            "gemini-cli",
            "local-first",
            "remote-mcp",
            "session-mirroring",
            "slack-mcp",
            "secure-by-default",
            "llm",
            "slack-integration",
            "ai-agents",
            "automation",
            "productivity",
            "oauth-free",
            "no-admin-approval",
            "cursor",
            "copilot",
            "windsurf",
            "codex-cli",
            "stealth-mode"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@jtalk22/slack-mcp",
          "is_deprecated": false,
          "latest_version": "4.6.0",
          "repository_url": "https://github.com/jtalk22/slack-mcp-server",
          "versions_count": 41,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 4736,
          "first_published_at": "2026-01-03T20:26:39.283000Z",
          "latest_published_at": "2026-07-21T22:11:23.724000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 20,
      "stars": 29,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-01-07",
            "count": 1
          },
          {
            "date": "2026-01-11",
            "count": 1
          },
          {
            "date": "2026-01-17",
            "count": 1
          },
          {
            "date": "2026-01-19",
            "count": 1
          },
          {
            "date": "2026-02-08",
            "count": 1
          },
          {
            "date": "2026-02-10",
            "count": 1
          },
          {
            "date": "2026-02-13",
            "count": 1
          },
          {
            "date": "2026-02-24",
            "count": 1
          },
          {
            "date": "2026-02-28",
            "count": 1
          },
          {
            "date": "2026-03-05",
            "count": 1
          },
          {
            "date": "2026-03-25",
            "count": 1
          },
          {
            "date": "2026-03-30",
            "count": 1
          },
          {
            "date": "2026-04-03",
            "count": 1
          },
          {
            "date": "2026-04-13",
            "count": 1
          },
          {
            "date": "2026-04-20",
            "count": 1
          },
          {
            "date": "2026-05-01",
            "count": 1
          },
          {
            "date": "2026-05-29",
            "count": 1
          },
          {
            "date": "2026-07-14",
            "count": 2
          },
          {
            "date": "2026-07-22",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 20,
        "total_forks": 20
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 42457,
      "source_files_sampled": 44,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 4895
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 95,
        "malicious_count": 0,
        "assessed_package": "npm:@jtalk22/slack-mcp@4.6.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.27.0"
        },
        {
          "name": "express",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.2.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": true,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": true,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/puppeteer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.13",
            "ecosystem": "npm"
          },
          {
            "name": "@puppeteer/browsers",
            "direct": false,
            "version": "2.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@tootallnate/quickjs-emscripten",
            "direct": false,
            "version": "0.23.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "25.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/yauzl",
            "direct": false,
            "version": "2.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ast-types",
            "direct": false,
            "version": "0.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "b4a",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "bare-events",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "bare-fs",
            "direct": false,
            "version": "4.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "bare-os",
            "direct": false,
            "version": "3.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "bare-path",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "bare-stream",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "bare-url",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "basic-ftp",
            "direct": false,
            "version": "5.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "buffer",
            "direct": false,
            "version": "5.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "buffer-crc32",
            "direct": false,
            "version": "0.2.13",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "data-uri-to-buffer",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "degenerator",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "devtools-protocol",
            "direct": false,
            "version": "0.0.1299070",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "end-of-stream",
            "direct": false,
            "version": "1.4.5",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "escodegen",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "esprima",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "events-universal",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "extract-zip",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-fifo",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "fd-slicer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-uri",
            "direct": false,
            "version": "6.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.31",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "http-proxy-agent",
            "direct": false,
            "version": "7.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "ieee754",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": false,
            "version": "6.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "7.18.3",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "netmask",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "pac-proxy-agent",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "pac-resolver",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "pend",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": "1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "playwright-core",
            "direct": false,
            "version": "1.61.1",
            "ecosystem": "npm"
          },
          {
            "name": "progress",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-agent",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-from-env",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "pump",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "smart-buffer",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "socks",
            "direct": false,
            "version": "2.8.7",
            "ecosystem": "npm"
          },
          {
            "name": "socks-proxy-agent",
            "direct": false,
            "version": "8.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "streamx",
            "direct": false,
            "version": "2.23.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tar-fs",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "tar-stream",
            "direct": false,
            "version": "3.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "teex",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "text-decoder",
            "direct": false,
            "version": "1.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "through",
            "direct": false,
            "version": "2.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "unbzip2-stream",
            "direct": false,
            "version": "1.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.18.2",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yauzl",
            "direct": false,
            "version": "2.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 171,
        "direct_count": 2,
        "indirect_count": 169
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 164,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 7,
        "closed_unmerged_prs": 21
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "jtalk22",
          "commits": 269,
          "avatar_url": "https://avatars.githubusercontent.com/u/141901428?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        },
        {
          "type": "User",
          "login": "bryanmwood",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/171692620?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.989
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ai-review-noise-guard.yml",
        "attribution-guardrail.yml",
        "ci.yml",
        "claude.yml",
        "dependabot-auto-merge.yml",
        "docker-publish.yml",
        "live-browser-smoke.yml",
        "publish.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/25 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 4,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "828d55f4362f89b725e8163bd55fc6b9b3e2f392",
        "ran_at": "2026-07-30T17:27:47Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T16:48:01Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-28T16:47:42Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/jtalk22/slack-mcp-server",
    "host": "github.com",
    "name": "slack-mcp-server",
    "owner": "jtalk22"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 69,
            "calibrated": 81,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 81,
      "inputs": {
        "security": 70,
        "vitality": 89,
        "community": 56,
        "governance": 51,
        "calibration": "2026-08-02",
        "engineering": 81,
        "ai_readiness": 57,
        "weighted_overall_raw": 69
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 89,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "commits_last_year": 306,
              "human_commit_share": 0.68,
              "days_since_last_push": 2,
              "active_weeks_last_year": 26
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "26/52 weeks with commits",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 26
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "306 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 306
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 36,
              "latest_release_tag": "v4.6.0",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 9.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "36 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~9.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 9.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 56,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "forks": 20,
              "stars": 29,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "29 stars",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 29
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "20 forks",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "packages": [
                "@jtalk22/slack-mcp"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 4736
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "4,736 downloads/month across npm",
                "points": 49,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 4736,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 51,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.989
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 99% of commits",
                "points": 0.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 79,
            "inputs": {
              "merged_prs": 164,
              "open_issues": 0,
              "closed_issues": 7,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 21,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 42,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "164/185 decided PRs merged",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 164,
                      "decided": 185
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 28,
            "inputs": {
              "followers": 2,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "jtalk22",
              "public_repos": 2,
              "account_age_days": 1085
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2 followers of jtalk22",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2,
                      "login": "jtalk22"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "2 public repos, account ~2 yr old",
                "points": 9.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 2
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@jtalk22/slack-mcp"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "41 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 81,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "ai-agents",
                "claude",
                "codex",
                "copilot",
                "cursor",
                "developer-tools",
                "gemini-cli",
                "llm",
                "mcp",
                "mcp-server",
                "model-context-protocol",
                "productivity",
                "slack",
                "slack-api",
                "windsurf",
                "ai",
                "agents",
                "automation",
                "slack-integration",
                "claude-desktop"
              ],
              "has_wiki": true,
              "homepage": "https://mcp.revasserlabs.com",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://mcp.revasserlabs.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "20 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 70,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@jtalk22/slack-mcp@4.6.0 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@jtalk22/slack-mcp@4.6.0",
                  "assessed": 95
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 95,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 95,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 57,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 4895
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "68 of 68 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 68,
                      "sampled": 68
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.32
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "32 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 32,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 42457,
              "source_files_sampled": 44,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/44 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 44,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library",
        "application"
      ],
      "labels": [
        "mcp-server",
        "library",
        "network-service"
      ],
      "scores": {
        "cli": 2,
        "library": 6,
        "mcp-server": 9,
        "network-service": 4
      },
      "primary": "mcp-server",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:npm",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "mcp-server",
          "source": "dep:@modelcontextprotocol/sdk",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:express",
          "weight": 4
        },
        {
          "tier": "structure",
          "label": "mcp-server",
          "source": "mcp_signal",
          "weight": 3
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "mcp-server",
          "source": "tag:mcp-server",
          "weight": 2
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T17:28:08.196642Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jtalk22/slack-mcp-server.svg",
  "full_name": "jtalk22/slack-mcp-server",
  "license_state": "standard",
  "license_spdx": "MIT"
}

评分是信号,而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计,也不是安全保证。

缺失数据将被剔除并重新归一化权重,绝不按零分计。方法论已版本化并公开:指标 v2.5.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置: 汇总统计npm.