kumavis

> What are the environment details? @mhofman This is endo pet daemon, the error originally occurred in a compartment in a worker The extra properties are: ``` columnNumber, fileName, lineNumber,...

in the context of my work building on top of the endo daemon, I have some backend code and some frontend code i'm developing. the frontend calls the backend via...

we also noted that "scuttling the realm global" could change the behavior of code running inside a compartment due to this info leak

@weizman did we see any change in behavior / bugs introduced to lavamoat confined code under scuttling? "making has always return true" does seem like the safest behavior `typeof xyz`...

@dckc theres a few other ways a "non-canonical" (wrt to the npm registry) package name can be used, such as [`bundledDependencies`](https://docs.npmjs.com/cli/v7/configuring-npm/package-json#bundleddependencies). I have a poc in my [`bad-ideas-collection`](https://github.com/LavaMoat/bad-idea-collection/blob/main/packages/non-canonical-bundled/README.md)

same issue, [email protected] on chrome

workaround: ```js const api = new ChatGPTAPI({ apiKey, // workaround for https://github.com/transitive-bullshit/chatgpt-api/issues/592 fetch: self.fetch.bind(self), }) ```

:+1:

obviously theres parameterization in the QR code that is flexible and not specified in the scope, but great for testing. especially if you provide the private key / seed phrase...

I agree