news.volyx.in

A Secure Runtime for JavaScript and TypeScript Built with V8, Rust, and Tokio (deno.land)

428 points by GutenYe · 2663 days ago · 66 comments on HN

Article summary

Deno is a fast, open-source, fully Node-compatible JavaScript runtime with TypeScript and built-in tools. It has granular security controls, including a default deny policy, scoped grants, and audits. Deno is built with V8, Rust, and Tokio, and has a standard library included. It can be used for building web applications, desktop applications, and more.

Main themes

  • Deno runtime
  • JavaScript security
  • TypeScript support
  • Node.js comparison
  • Rust implementation

What commenters say

  • Deno's design decision to die on uncaught errors is a good practice for finding problems before they cost money.
  • The use of promises can make crashing on uncaught errors unnecessary, except in cases of resource disposal.
  • Deno's security features are necessary to prevent malicious packages from causing harm, as seen in recent incidents like the 'event-stream' package being used to steal cryptocurrency wallets.
  • The project is still in development and not yet ready for production use due to potential breaking changes.
  • The security flags in Deno are not yet fully implemented and can be cumbersome to use, often requiring all security switches to be flipped off.
  • The use of flatbuffer serialization and deserialization may introduce significant overhead in Deno API function calls.
  • Deno's development is actively ongoing, with a large pool of contributors and significant changes since its initial announcement.