I believe the technical term for the property that existing JS engines lack here is "safe for space". The V8 bug (https://issues.chromium.org/issues/41070945 ht

I believe the technical term for the property that existing JS engines lack here is "safe for space". The V8 bug (https://issues.chromium.org/issues/41070945 https://issues.chromium.org/issues/41070945) has already been linked elsewhere). Here's a long-standing SpiderMonkey bug: https://bugzilla.mozilla.org/show_bug.cgi?id=894971 https://bugzilla.mozilla.org/show_bug.cgi?id=894971. Here's a JSC equivalent: https://bugs.webkit.org/show_bug.cgi?id=224077.\ https://bugs.webkit.org/show_bug.cgi?id=224077.\ Both of those bugs (especially the JSC one) sketch out possible solutions and give some insight into why this is hard to implement efficiently. In general, it adds a lot of complexity to an already complicated (and performance-sensitive!) chunk of code.