Skip to content

Charge AI training crawlers for access (x402 gateway) - #25

Merged
ralyodio merged 1 commit into
mainfrom
x402-gateway
Sep 5, 2026
Merged

Charge AI training crawlers for access (x402 gateway)#25
ralyodio merged 1 commit into
mainfrom
x402-gateway

Conversation

@ralyodio

@ralyodio ralyodio commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Runs @profullstack/x402-gateway first inside the Bun.serve fetch handler: training crawlers get 402 with an x402 offer or the sales page at /crawl; a paid pass opens the site for a day. Adds a generated robots.txt. COINPAY_X402_KEY and CRAWL_PAY_TO are set on the Railway service.

🤖 Generated with Claude Code

https://claude.ai/code/session_01YafYxayh7Gqe5MWNNQMev2

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​profullstack/​x402-gateway@​0.1.07610010088100

View full report

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

31 finding(s)

MEDIUM: 27 | LOW: 4

Severity Rule Location
MEDIUM js-unescaped-html-sink public/app.js:81
MEDIUM js-unescaped-html-sink public/app.js:137
MEDIUM js-unescaped-html-sink public/app.js:284
MEDIUM js-unescaped-html-sink public/app.js:627
MEDIUM js-unescaped-html-sink public/app.js:631
MEDIUM js-unescaped-html-sink public/app.js:685
MEDIUM js-unescaped-html-sink public/app.js:1100
MEDIUM js-unescaped-html-sink public/app.js:1101
MEDIUM js-unescaped-html-sink public/app.js:1148
MEDIUM js-unescaped-html-sink public/app.js:1666
MEDIUM js-unescaped-html-sink public/app.js:1851
MEDIUM js-unescaped-html-sink public/app.js:1863
MEDIUM js-unescaped-html-sink public/app.js:1905
MEDIUM js-unescaped-html-sink public/app.js:1965
MEDIUM js-unescaped-html-sink public/app.js:2124
MEDIUM js-unescaped-html-sink public/app.js:2140
MEDIUM js-unescaped-html-sink public/app.js:2291
MEDIUM js-unescaped-html-sink public/app.js:2308
MEDIUM js-unescaped-html-sink public/app.js:2513
MEDIUM js-unescaped-html-sink public/auth.js:41
MEDIUM js-unescaped-html-sink public/auth.js:59
MEDIUM js-unescaped-html-sink public/auth.js:106
MEDIUM js-unescaped-html-sink public/auth.js:258
MEDIUM sql-template-interpolation src/cli.ts:1033
MEDIUM sql-template-interpolation src/research/routes.ts:299
MEDIUM sql-template-interpolation src/server.ts:488
MEDIUM sql-template-interpolation src/symbols/routes.ts:75
LOW secret-generic-api-key test/auth.test.ts:190
LOW js-dynamic-code-execution test/dashboard-crypto.test.ts:216
LOW js-dynamic-code-execution test/dashboard-search.test.ts:182
LOW js-dynamic-code-execution test/dashboard-watchlist.test.ts:236

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit bd2d14a into main Sep 5, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants