Jupyter Notebook module

[bpmct]

A discussion dedicated to the Jupyter Notebook module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	18 / 25	20 / 20	0 / 20	8 / 10	63 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Single clear example with sensible defaults for running Jupyter Notebook.
Coder-context framing	8	0	README states "adds Jupyter Notebook in your Coder template" but does not explain what the module adds on top of Coder or show where Coder fits in the flow.
Visual preview	5	5	README includes  image.

IDE Integration — 18 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource with proper subdomain, share, and URL configuration.
Managed configuration	6	0	No documented support for managed Jupyter settings or configuration files.
Configurable folder or workdir	6	6	Jupyter starts in the agent's working directory by default; users can navigate to any folder within the Notebook interface.
Pre-installed extensions	6	5	Documented support for pre-installing Python packages via requirements_path and pip_install_extra_packages variables, which extend Jupyter's capabilities. Not traditional extensions but functionally equivalent for this tool.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in this module; authentication is disabled (--ServerApp.token='' --ServerApp.password=''). README example contains no inline secrets.
Non-hardcoded auth path	4	4	Module intentionally disables authentication for use within Coder's authenticated workspace context, which is the appropriate pattern.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the pipx/pip package source. The module hardcodes pipx install notebook with no mirror configuration.
Bring-your-own binary	5	0	No documented way to skip installation when jupyter-notebook is pre-installed. The script checks command -v jupyter-notebook but still attempts package installation via pipx.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (PyPI, pipx sources). Endpoints are only inferable from code.
Runs without sudo	2	0	Script uses pipx which installs to $HOME/.local/bin, but the script explicitly checks for pipx and exits if not found, requiring it to be pre-installed (likely requiring sudo during image build). The runtime script itself doesn't invoke sudo, but the prerequisite setup is not documented as a no-sudo path. Actually, reviewing more carefully: the script runs entirely without sudo (pipx to user home, jupyter to user home). Full credit earned from code verification. Changing to 2.

Correction after re-review of run.sh: The script never invokes sudo. It uses pipx (user-local), installs to $HOME/.local/bin, and runs jupyter from user space. Per rubric: "scripts that verifiably never invoke sudo earn full credit from the code alone, no README mention needed."

Restricted-Environment Readiness — 2 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the pipx/pip package source. The module hardcodes pipx install notebook with no mirror configuration.
Bring-your-own binary	5	0	No documented way to skip installation when jupyter-notebook is pre-installed. The script checks command -v jupyter-notebook but still attempts package installation via pipx.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (PyPI, pipx sources). Endpoints are only inferable from code.
Runs without sudo	2	2	Script verifiably never invokes sudo: uses pipx to user home, installs to $HOME/.local/bin, runs jupyter from user space.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions and sensible defaults. The share variable includes proper validation.
Test coverage	4	2	No .tftest.hcl or TypeScript tests visible in the provided files.

Overall — 63 / 100

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.