Files

T

Mish Ushakov 5417dd4f9f fix(deps): resolve all open Dependabot alerts (#1598 )

## Summary

Fixes all 8 open [Dependabot
alerts](https://github.com/e2b-dev/E2B/security/dependabot), all in
`pnpm-lock.yaml`:

| Package | Severity | Alerts | Before | After | How |
|---|---|---|---|---|---|
| `@vitest/browser` | critical | #328 | 4.1.8 | 4.1.10 | updated the
vitest family in js-sdk and cli devDeps (4.1.10 peer-requires
`vitest@4.1.10` exactly) |
| `tar` | critical/high/medium ×4 | #324–#327 | 7.5.16 | 7.5.21 | bumped
the js-sdk runtime dep floor to `^7.5.19` + repo-wide override |
| `sharp` | high | #329 | 0.34.5 | 0.35.3 | new override (pinned exactly
by miniflare, dev-only) |
| `shell-quote` | high | #323 | 1.8.4 | 1.10.0 | widened existing
override (dev-only, via npm-run-all) |
| `brace-expansion` | high | #322 | 2.1.0 | 2.1.2 | widened existing
override |

The only runtime-dependency change is `tar` in the js-sdk (used for
template build contexts), so a patch changeset for `e2b` is included.
The CLI bundles the SDK and its dependencies into `dist/index.js`, so
the published CLI also ships the vulnerable `tar` — a patch changeset
for `@e2b/cli` is included to rebundle it. Everything else is dev
tooling or lockfile-only.

## Verification

- `pnpm run lint` and `pnpm run typecheck` pass (the 7 python-sdk ty
diagnostics pre-exist on main)
- js-sdk: unit + connectionConfig (393 passed) and template projects
(132 passed, exercises the new `tar` end-to-end against the real API) on
vitest 4.1.10; `pnpm run build` clean
- js-sdk `test:cf` passes — miniflare/workerd boots with sharp 0.35.3
- cli: full suite green (103 passed) on vitest 4.1.10

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-23 18:56:01 +02:00

src

feat(cli): rename team to project in ~/.e2b/config.json (#1570 )

2026-07-23 14:22:31 +02:00

testground/demo-basic

New infra (#212 )

2023-11-06 15:07:09 +01:00

tests

feat(cli): rename team to project in ~/.e2b/config.json (#1570 )

2026-07-23 14:22:31 +02:00

.envrc

Ensure that httpx transport is reused across calls by default (#997 )

2025-11-14 16:48:29 -08:00

.gitignore

feat: add template migration to CLI (#880 )

2025-09-19 17:41:28 +02:00

.prettierignore

feat: add template init for new template SDK (#881 )

2025-09-26 06:40:58 -07:00

LICENSE

Added license sources to SDKs (#761 )

2025-06-05 07:10:07 -07:00

package.json

fix(deps): resolve all open Dependabot alerts (#1598 )

2026-07-23 18:56:01 +02:00

README.md

docs: fix duplicate logo on NPM/PyPI by switching to <picture> element (#1466 )

2026-06-19 19:26:46 +00:00

tsconfig.json

chore(js-sdk,cli): modernize tsconfig and adopt TypeScript 7 (side-by-side) (#1536 )

2026-07-09 18:35:15 +00:00

tsdown.config.ts

build: switch from tsup to tsdown (#1515 )

2026-07-09 19:04:03 +02:00

vitest.config.ts

fix: CLI tests setup (#969 )

2025-10-17 05:03:18 -07:00

README.md

E2B CLI

This CLI tool allows you to build manager your running E2B sandbox and sandbox templates. Learn more in our documentation.

1. Install the CLI

Using Homebrew (on macOS)

brew install e2b

Using NPM

npm install -g @e2b/cli

2. Authenticate

e2b auth login

Note

To authenticate without the ability to open the browser, provide E2B_ACCESS_TOKEN as an environment variable. You can find your token in Account Settings under the Team selector at e2b.dev/dashboard. Then use the CLI like this: E2B_ACCESS_TOKEN=sk_e2b_... e2b template create.

Important

Note the distinction between E2B_ACCESS_TOKEN and E2B_API_KEY.

3. Check out docs

Visit our CLI documentation to learn more.