Platformatic open-sources secure-eval-worker for permission-scoped JS sandboxing in Node.js

threepointone · x · 2026-09-18

Platformatic released secure-eval-worker, a tool for running JavaScript in Node.js with only the permissions you explicitly grant.

threepointone boosted it as "code mode". Key insight: moving code to a worker thread does not isolate it — workers still get filesystem, network and process access unless you strip those capabilities. The tool targets safe execution of untrusted or agent-generated code.

Original post →

More from coding & agent

coding & agent channel →