
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@opentag/slack
Advanced tools
Slack adapter helpers for OpenTag.
Use this package to normalize Slack app_mention events into OpenTagEvent
objects, encode or parse Slack source-thread keys, and adapt unified delivery
presentations for Slack.
pnpm add @opentag/slack
normalizeSlackAppMention: converts a Slack app mention into an OpenTagEvent.slackThreadKey: encodes team, channel, and thread timestamp for source-thread delivery.parseSlackThreadKey: decodes a Slack thread key for chat.postMessage.SlackChannelBinding: Slack compatibility binding contract that maps into the generic channel binding layer.import { normalizeSlackAppMention } from "@opentag/slack";
const event = normalizeSlackAppMention({
teamId: "T123",
channelId: "C123",
userId: "U456",
text: "<@U_APP> investigate this deploy failure",
ts: "1710000000.000100",
eventId: "Ev123",
eventTime: 1710000000,
botUserId: "U_APP",
binding: {
teamId: "T123",
channelId: "C123",
repoProvider: "github",
owner: "acme",
repo: "demo"
}
});
if (event) {
// Send event to @opentag/client or your own OpenTag-compatible control plane.
}
Thread key format is part of the source-thread identity used by ingress and the delivery adapter. A breaking format change must update both sides atomically.
FAQs
Slack app mention normalization and callback helpers for OpenTag.
The npm package @opentag/slack receives a total of 10 weekly downloads. As such, @opentag/slack popularity was classified as not popular.
We found that @opentag/slack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.