JupyterLab module

[bpmct]

A discussion dedicated to the JupyterLab module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	13 / 25	20 / 20	0 / 20	8 / 10	58 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage and advanced configuration with the config parameter showing JupyterLab server settings customization
Coder-context framing	8	0	README states "A module that adds JupyterLab in your Coder template" but does not explain what JupyterLab adds on top of Coder or show where Coder fits in the workflow
Visual preview	5	5	README includes  image

IDE Integration — 13 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource present with proper healthcheck, subdomain support, and URL configuration
Managed configuration	6	6	config variable documented with JSON configuration support, writes to ~/.jupyter/jupyter_server_config.json via coder_script resource
Configurable folder or workdir	6	0	No documented support for opening or starting in a configured folder. The example shows root_dir = "/workspace/notebooks" in config but this is not documented as a feature or input variable
Pre-installed extensions	6	0	No documented support for pre-installing JupyterLab extensions

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in the module; all variables are non-secret configuration options
Non-hardcoded auth path	4	4	JupyterLab runs with --ServerApp.token='' --ServerApp.password='' (no auth), relying on Coder's authentication layer; no raw keys needed

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the JupyterLab package source. The script installs via pipx install jupyterlab or uv pip install jupyterlab with hardcoded package names and no URL override mechanism
Bring-your-own binary	5	0	No documented way to skip installation when JupyterLab is pre-installed. Script checks command -v jupyter-lab and skips install if found, but this is not documented as a supported pattern
Egress transparency	3	0	No dedicated README section enumerating external endpoints. PyPI access for package installation is implicit but not documented
Runs without sudo	2	0	Script uses pipx and uv which may require system-level dependencies. The test file shows apk add pipx and apk --no-cache add uv gcc musl-dev linux-headers requiring root, though the module script itself doesn't invoke sudo. However, the practical requirement for system package installation to make the script work means it doesn't run without elevated privileges in typical scenarios

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Variables have clear descriptions, sensible defaults (port 19999, subdomain true, share owner), and validation on share variable
Test coverage	4	2	.test.ts file present with multiple test cases covering installer detection, config file writing, and CSP fallback. However, the main installation tests are commented out as TODOs due to timeouts, limiting actual coverage of core functionality

Overall — 58 / 100

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.