I'm not a fan of Deno's security model (2024)

Automated excerpt

so I can get it out of my head and move on. we’re gonna talk about how Deno approaches Deno is a language runtime for JavaScript. it consists of a standard library, a package manager, a TypeScript transpiler and a bunch of other stuff that’s not important for our story. it’s not a JavaScript implementation, so it does not interpret or compile JavaScript, it reuses V8 for that. (it’s under the “Secure by default” header on their landing page). the standard library will only allow code.ts to read /tmp/dir and run uname. and you can grant or refuse it.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.