builderbot: our probe ran the wrong package manager
Not a finding about builderbot. On 2026-09-13 our probe ran npm; this project declares pnpm 8.6.12, and npm could not resolve its workspace: dependencies.
About builderbot
This receipt is about our tooling, not about builderbot. The project's package.json declares packageManager: pnpm@8.6.12. Our probe ran npm install anyway and npm cannot resolve the workspace: protocol, so it exited 1. Nothing here says whether builderbot's dependencies resolve; we did not find out.
npm install --ignore-scripts --no-audit --no-fund --no-update-notifier exited 1 after 16 seconds. It said: code EUNSUPPORTEDPROTOCOL, Unsupported URL Type "workspace:": workspace:*.
We cloned the repository at commit accb3ec34cc7 and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Node v26.7.0, npm 11.19.0. We did not run the bot: this is an observation about whether its dependencies resolve on that day, on that toolchain, and nothing more.