Skip to content

Missing firewall domains for Deno ecosystem: esm.sh, cdn.jsdelivr.net #947

@Mossaka

Description

@Mossaka

Summary

In the AWF Build/Test Experiment v3 (Feb 17, 2026), several Deno repos failed to build because key CDN domains used by the Deno ecosystem are not in the firewall allowlist.

Good news: jsr.io and deno.land have been added since v2 — this fixed oak and improved other repos.

Missing Domains

Domain Repos Affected Usage
esm.sh saaskit, fresh ESM CDN used by Fresh framework and Deno projects for importing npm packages
cdn.jsdelivr.net lume CDN used by Lume static site generator for Deno module distribution

Impact

  • 3 Deno repos cannot build at all (lume, saaskit fail completely; fresh partially affected)
  • These domains are fundamental to the Deno ecosystem, used by many projects beyond our test set

Suggestion

Add to the Deno/node ecosystem domain allowlist:

  • esm.sh
  • cdn.jsdelivr.net

Experiment Context

  • gh-aw: v0.45.2, AWF: v0.19.1
  • Deno overall: 7/10 builds succeed, would likely improve to 9-10/10 with these domains
  • Full report: AWF Build/Test Experiment v3 (Feb 17, 2026)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions