you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 months ago (6 children)

Is there another nodejs alternative that supports typescript in a similar way?

  • source
  • hideshow 6 child comments
  • [–] 12 points 4 months ago (4 children)

    Does Deno fit your needs? It is also a drop-in replacement to a large degree, but is somewhat focused on improving the related tooling environment.

    I'm not very involved in the (non-browser) JS ecosystem, but it's my tool of choice.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 4 months ago*

    Deno is pretty interesting because it has built in sandboxing. By default, no code can even access the network. Everything must be explicitly allowed, including network access and environment variables: https://docs.deno.com/runtime/fundamentals/security/

    Access can be scoped pretty granularly as well, only allowing access to specific websites or env variables.

    I really like this model since it offers a strong protection against secrets stealers, which have hit NPM extremely frequently. No more of malicious NPM packages scraping the whole system to find secrets.

    It does have a performance tradeoff compared to Bun. Bun is (was?) the fastest, Node was the slowest, Deno was in the middle.

  • source
  • parent