Package @sebastianwessel/quickjs

This TypeScript package allows you to safely execute JavaScript and TypeScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution.

Documentation

Installation
Usage and Best Practice:
Compatibility:
- Core Javascript
- NodeJS
Runtime options
Run Tests in QuickJS
Credits
Find examples in the repository

Features

Security: Run untrusted JavaScript and TypeScript code in a safe, isolated environment.
Basic Node.js modules: Provides basic standard Node.js module support for common use cases.
File System: Can mount a virtual file system.
Custom Node Modules: Custom node modules are mountable.
Fetch Client: Can provide a fetch client to make http(s) calls.
Test-Runner: Includes a test runner and chai based expect.
Performance: Benefit from the lightweight and efficient QuickJS engine..
Versatility: Easily integrate with existing TypeScript projects.
Simplicity: User-friendly API for executing and managing JavaScript and TypeScript code in the sandbox.

Version 1: Rolling Release

Fast Lane - Fast Pace

Welcome to the first version of our npm package! This release follows a rolling release model, prioritizing rapid development and quick iterations. The approach is designed to deliver features swiftly, gather feedback promptly, and implement fixes without delay. This means you get the latest features and improvements as soon as they are ready, ensuring you always have access to the cutting-edge functionality.

Key aspects of our rolling release model:

Ship Fast: Release new features and updates as soon as they are developed.
Get Fast Feedback: Your feedback is crucial. I listen and respond quickly to ensure the package meets your needs.
Fix Quickly: Bugs and issues are addressed promptly, minimizing any disruptions.
Fast-Paced Development: Our development cycle is agile, allowing us to adapt and evolve based on user input.

Stay tuned for frequent updates and enhancements.

Basic Usage

Here’s a simple example of how to use the package:

import { quickJS } from '@sebastianwessel/quickjs'

// General setup like loading and init of the QuickJS wasm
// It is a ressource intensive job and should be done only once if possible 
const { createRuntime } = await quickJS()

// Create a runtime instance each time a js code should be executed
const { evalCode } = await createRuntime({
  allowFetch: true, // inject fetch and allow the code to fetch data
  allowFs: true, // mount a virtual file system and provide node:fs module
  env: {
    MY_ENV_VAR: 'env var value'
  },
})


const result = await evalCode(`
import { join } as path from 'path'

const fn = async ()=>{
  console.log(join('src','dist')) // logs "src/dist" on host system

  console.log(env.MY_ENV_VAR) // logs "env var value" on host system

  const url = new URL('https://example.com')

  const f = await fetch(url)

  return f.text()
}
  
export default await fn()
`)

console.log(result) // { ok: true, data: '<!doctype html>\n<html>\n[....]</html>\n' }

Credits

This lib is based on:

Tools used:

License

This project is licensed under the MIT License.

This package is ideal for developers looking to execute JavaScript code securely within a TypeScript application, ensuring both performance and safety with the QuickJS WebAssembly sandbox.