snow vs vm2

With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

surveyjs.io

featured

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

snow		vm2
	Project
1	Mentions	14
96	Stars	3,832
-	Growth	-
7.8	Activity	4.5
6 months ago	Latest Commit	2 months ago
JavaScript	Language	JavaScript
MIT License	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

snow

Posts with mentions or reviews of snow. We have used some of these posts to build our list of alternatives and similar projects.

Snow JavaScript: A new browser JavaScript security tool for iframes protection
1 project | news.ycombinator.com | 4 Jan 2023

vm2

Posts with mentions or reviews of vm2. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-04-13.

Vm2 discontinued due to unfixable security issues
1 project | news.ycombinator.com | 12 Jul 2023
VM2 (Puppeteer Dependency) Is Deprecated Due to Critical Security Issues
1 project | news.ycombinator.com | 12 Jul 2023
NPM package vm2 is no longer secure
1 project | news.ycombinator.com | 11 Jul 2023
CVE-2023-29017 / Query Help
1 project | /r/crowdstrike | 8 Apr 2023

Sandbox Escape · Advisory · patriksimek/vm2 · GitHub
Sandbox Escape in VM2 - designed to run untrusted code in an isolated context on Node.js servers - used by integrated development environments (IDEs) and code editors, function-as-a-service (FaaS) solutions, pen-testing frameworks, security tools, and various JavaScript-related products
1 project | /r/blueteamsec | 8 Apr 2023
Does reinitializing a new vm cause memory leak when using vm2?
1 project | /r/node | 19 Jan 2023
Is there a way to destroy the vm when using vm2?
1 project | /r/node | 18 Jan 2023
What is the purpose of 'vm' module?
1 project | /r/node | 19 Jun 2022

There are projects like vm2 based on vm, but they seem to be offer best-effort solutions for avoiding frequently discovered vulnerabilities, and cannot guarantee safety in general.
[AskJS] How to security test JS playground?
2 projects | /r/javascript | 13 Apr 2022

Here is link number 1 - Previous text "vm2"
Run untrusted code in sandbox
2 projects | /r/node | 24 Mar 2022

Something like this? https://github.com/patriksimek/vm2

What are some alternatives?

When comparing snow and vm2 you can also consider the following projects:

deno - A modern runtime for JavaScript and TypeScript.

TypeScript - TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

JS-Interpreter - A sandboxed JavaScript interpreter in JavaScript.

jk - Configuration as Code with ECMAScript

sysbox - An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

rfcs - Public change requests/proposals & ideation

sablejs - 🏖️ The safer and faster ECMA5.1 interpreter written by JavaScript

starlark-rust - A Rust implementation of the Starlark language

eps - Our endpoint system (eps) that manages and secures the communication between different actors in the IRIS connect ecosystem. Think of it as a distributed service mesh router as well as a decentralized message broker. Still evolving, use with caution.

dhall-lang - Maintainable configuration files

json5 - JSON5 — JSON for Humans

node-config - Node.js Application Configuration