lobu: our probe could not resolve this project's workspaces
Not a finding about lobu. On 2026-09-13 our probe ran npm and could not resolve this project's workspace: dependencies.
About lobu
This receipt is about our tooling, not about lobu. The project's package.json declares workspaces, and the npm install our probe ran could not resolve the workspace: protocol its dependencies use, so it exited 1. It names no package manager, so we cannot say which one its authors expect; we can only say ours did not work. Nothing here says whether lobu's dependencies resolve.
npm install --ignore-scripts --no-audit --no-fund --no-update-notifier exited 1 after 8 seconds. It said: code EUNSUPPORTEDPROTOCOL, Unsupported URL Type "workspace:": workspace:*.
We cloned the repository at commit f097de411ca0 and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Node v26.7.0, npm 11.19.0. We did not run the bot: this is an observation about whether its dependencies resolve on that day, on that toolchain, and nothing more.