Software Passport · public repository

shibayu36/slack-explorer-mcp

Observed by SPR on 2026-09-18 at commit ea0b44d6b3269c77478d65987d9b9c75f70a3f33 (main). Source: github.com/shibayu36/slack-explorer-mcp.

SBOM components23

Open findings17

Critical / high0 / 0

Evidence items27

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings

Severity	Finding	Component
MEDIUM	License not observed	gopkg.in/yaml.v3
MEDIUM	License not observed	golang.org/x/net
MEDIUM	License not observed	github.com/yosida95/uritemplate/v3
MEDIUM	License not observed	github.com/wk8/go-ordered-map/v2
MEDIUM	License not observed	github.com/stretchr/testify
MEDIUM	License not observed	github.com/stretchr/objx
MEDIUM	License not observed	github.com/spf13/cast
MEDIUM	License not observed	github.com/slack-go/slack
MEDIUM	License not observed	github.com/pmezard/go-difflib
MEDIUM	License not observed	github.com/mark3labs/mcp-go
MEDIUM	License not observed	github.com/mailru/easyjson
MEDIUM	License not observed	github.com/invopop/jsonschema
MEDIUM	License not observed	github.com/gorilla/websocket
MEDIUM	License not observed	github.com/google/uuid
MEDIUM	License not observed	github.com/davecgh/go-spew
MEDIUM	License not observed	github.com/buger/jsonparser
MEDIUM	License not observed	github.com/bahlo/generic-list-go

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy