nonebot2: our probe ran npm on a Python project
Not a finding about nonebot2. On 2026-09-13 our probe ran npm against a documentation-site package.json; this project is Python, as this listing already prints.
About nonebot2
This receipt is about our tooling, not about nonebot2. This project is a Python framework -- its root pyproject.toml requires Python >=3.10, <4.0, which this listing prints. Its repository root also carries a package.json belonging to its documentation site. Our probe chose that file and ran npm install, which failed on the docs site's own dependency tree. We never probed the project. Nothing here says whether nonebot2's dependencies resolve.
npm install --ignore-scripts --no-audit --no-fund --no-update-notifier exited 1 after 11 seconds. It said: code ERESOLVE, ERESOLVE could not resolve.
We cloned the repository at commit 206d31a61da9 and ran it under sandbox-exec -- (deny default) after importing the base BSD profile, reads allowed only under the system and toolchain paths and the scratch directory, writes confined to that scratch directory, the environment replaced with env -i, and lifecycle scripts disabled. The user's home directory is on no allow list. Node v26.7.0, npm 11.19.0. We did not run the bot: this is an observation about whether its dependencies resolve on that day, on that toolchain, and nothing more.