5 ms·
The thing that caught my eye immediately was the sandboxing. I have no idea why Node and npm don’t have sandboxing by default. It would greatly help with some o
by pikuseru 2mo ago
The thing that caught my eye immediately was the sandboxing. I have no idea why Node and npm don’t have sandboxing by default. It would greatly help with some of these worms and supply chain attacks.
- ptx 2mo agoThe "VM-isolated sandbox" is apparently not referring to the JavaScript VM but to a hypervisor, according to the text a bit further down on the page. I wouldn't expect that to be particularly fast or efficient, especially not if you're already running in a VM and have to use nested virtualization (if it's even available).
- theMackabu 2mo agoits pretty fast tbh, though third-party benches would be great to have!
- ptx 2mo agoIs it essentially implementing a paravirtualized OS that runs the JS runtime? Presumably you have to allocate the memory for the VM up front, or how does that work?
- theMackabu 2mo agoon linux its kvm, on darwin its hypervisor.framework, the memory is not upfront, by default 256mb is lazy allocated, and ~35mb are used by both ant + the vm. the kernel is https://nanos.org https://nanos.org with patches to get ant+networking running smoothly
- cognitiveinline 2mo agoDoes it work on windows?
- theMackabu 2mo agono sandbox on windows... yet!
- _shantaram 2mo agoDeno has that! Come join us :P no affiliation, just a happy user.