Summary
In the AWF Build/Test Experiment v3 (Feb 17, 2026), several Deno repos failed to build because key CDN domains used by the Deno ecosystem are not in the firewall allowlist.
Good news: jsr.io and deno.land have been added since v2 — this fixed oak and improved other repos.
Missing Domains
| Domain |
Repos Affected |
Usage |
esm.sh |
saaskit, fresh |
ESM CDN used by Fresh framework and Deno projects for importing npm packages |
cdn.jsdelivr.net |
lume |
CDN used by Lume static site generator for Deno module distribution |
Impact
- 3 Deno repos cannot build at all (lume, saaskit fail completely; fresh partially affected)
- These domains are fundamental to the Deno ecosystem, used by many projects beyond our test set
Suggestion
Add to the Deno/node ecosystem domain allowlist:
Experiment Context
- gh-aw: v0.45.2, AWF: v0.19.1
- Deno overall: 7/10 builds succeed, would likely improve to 9-10/10 with these domains
- Full report: AWF Build/Test Experiment v3 (Feb 17, 2026)
Summary
In the AWF Build/Test Experiment v3 (Feb 17, 2026), several Deno repos failed to build because key CDN domains used by the Deno ecosystem are not in the firewall allowlist.
Good news:
jsr.ioanddeno.landhave been added since v2 — this fixed oak and improved other repos.Missing Domains
esm.shcdn.jsdelivr.netImpact
Suggestion
Add to the Deno/node ecosystem domain allowlist:
esm.shcdn.jsdelivr.netExperiment Context