Blaxel Core SDK for TypeScript
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×2 in @blaxel/core
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 2
- fs package/dist/cjs/common/node.js :40
const fsImport = __importStar(require("fs")); - fs package/dist/esm/common/node.js :3
import * as fsImport from "fs";
network 22
- net package/dist/cjs-browser/agents/index.js :47
const response = await fetch(fetchUrl, { - net package/dist/cjs-browser/common/controlPlaneFetch.js :49
return globalThis.fetch(input); - net package/dist/cjs-browser/common/h2fetch.js :2
export function createH2Fetch(session) { return (input) => globalThis.fetch(input); } - net package/dist/cjs-browser/common/sentry.js :130
await fetch(envelopeUrl, { - net package/dist/cjs-browser/jobs/start.js :12
const response = await fetch(url); - net package/dist/cjs/agents/index.js :47
const response = await fetch(fetchUrl, { - net package/dist/cjs/common/controlPlaneFetch.js :49
return globalThis.fetch(input); - net package/dist/cjs/common/h2fetch.js :127
* Creates a fetch()-compatible function that sends requests over an existing - net package/dist/cjs/common/sentry.js :130
await fetch(envelopeUrl, { - net package/dist/cjs/image/image.js :621
let response = await fetch(`${settings_js_1.settings.baseUrl}/sandboxes/${name}?upload=true`, { - net package/dist/cjs/jobs/start.js :12
const response = await fetch(url); - net package/dist/esm-browser/agents/index.js :44
const response = await fetch(fetchUrl, { - net package/dist/esm-browser/common/controlPlaneFetch.js :43
return globalThis.fetch(input); - net package/dist/esm-browser/common/h2fetch.js :2
export function createH2Fetch(session) { return (input) => globalThis.fetch(input); } - net package/dist/esm-browser/common/sentry.js :125
await fetch(envelopeUrl, { - net package/dist/esm-browser/jobs/start.js :9
const response = await fetch(url); - net package/dist/esm/agents/index.js :44
const response = await fetch(fetchUrl, { - net package/dist/esm/common/controlPlaneFetch.js :43
return globalThis.fetch(input); - net package/dist/esm/common/h2fetch.js :120
* Creates a fetch()-compatible function that sends requests over an existing - net package/dist/esm/common/sentry.js :125
await fetch(envelopeUrl, { - net package/dist/esm/image/image.js :615
let response = await fetch(`${settings.baseUrl}/sandboxes/${name}?upload=true`, { - net package/dist/esm/jobs/start.js :9
const response = await fetch(url);
secrets 4
- secrets package/dist/cjs-browser/common/webhook.js :18
* secret: process.env.CALLBACK_SECRET! - secrets package/dist/cjs/common/webhook.js :18
* secret: process.env.CALLBACK_SECRET! - secrets package/dist/esm-browser/common/webhook.js :14
* secret: process.env.CALLBACK_SECRET! - secrets package/dist/esm/common/webhook.js :14
* secret: process.env.CALLBACK_SECRET!
declared dependencies 23
- @hey-api/client-fetch@^0.10.0
- @modelcontextprotocol/sdk@^1.20.0
- archiver@^7.0.1
- axios@^1.9.0
- dockerfile-ast@^0.7.1
- dotenv@^16.5.0
- form-data@^4.0.2
- jwt-decode@^4.0.0
- toml@^3.0.0
- uuid@^11.1.0
- ws@^8.18.2
- yaml@^2.7.1
- zod@^3.24.3
- @eslint/js@^9.26.0
- @testing-library/dom@^9.3.0
- @types/archiver@^7.0.0
- @types/ws@^8.18.1
- eslint@^9.27.0
- jsdom@^26.1.0
- typescript@^5.0.0
- typescript-eslint@^8.31.1
- vite@^5.2.0
- vitest@^1.5.0