TOtosh·Nov 20, 2022Submission
A safe eval library based on WebAssembly and Duktape/QuickJS
1 points · Open discussionmaple3142
wasm-jseval
C2020–2022
maple3142 / wasm-jseval
wasm-jseval
A safe eval library based on WebAssembly and Duktape/QuickJS.
4Distinct people
5Mentions
0Explicit recommenders
242GitHub stars
What to know before exploring
What it is
A safe eval library based on WebAssembly and Duktape/QuickJS.
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year5 dated mentions
Observed mentions: 2020-01-03 15:18:11 UTC to 2022-11-20 15:28:44 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 1 | 1 |
What Hacker News says
5 sourcesTangentially related:
I maintain a library for using QuickJS, a JS interpreter with more modern language support, from NodeJS or the web called QuickJS-Emscripten: https://github.com/justjake/quickjs-emscripten
This was inspired by seeing Duktape WASM build on HN (https://github.com/maple3142/duktape-eval) and Figma's blogposts about building a Javascript plugin runtime:
- How Figma built the Figma plugin system: Describes the LowLevelJavascriptVm interface (https://www.figma.com/blog/how-we-built-the-figma-plugin-sys...)
- An update on plugin security: Figma switches to QuickJS (https://www.figma.com/blog/an-update-on-plugin-security/)
In Duktape is an embeddable JavaScript engineOn a related note, a new project was posted here a couple days ago, that runs an entirely separate JavaScript runtime (Duktape or QuickJS) in WASM:
https://github.com/maple3142/wasm-jseval
I've been playing with this, exploring its potential for running user scripts.
As noted in another comment, Figma used a Realms polyfill for their plugins, similar to SES, then migrated to using WASM-ized QuickJS as a safer sandbox.
In Secure EcmaScript, a runtime for running third-party code safelyI noticed the GitHub repo's been updated to include a QuickJS version.
https://github.com/maple3142/wasm-jseval
In Show HN: Duktape-eval – a eval library built on Duktape and WebAssemblyShow HN: Duktape-eval – a eval library built on Duktape and WebAssembly
41 points · Open discussion