|about 2 months ago||7 days ago|
|GNU General Public License v3.0 or later||MIT License|
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Goja vs WASM runtime to support scripting
2 projects | reddit.com/r/golang | 4 Jan 2023
We've integrated wasmer ~1 year ago in our stack (video analytics and editing platform) to enable 3rd party plugins, but I'm not sure that I'd choose it again. The integration ended up too complicated and the thing I disliked most was that we had to reimplement/port a lot of the functionality we already had so that it worked with the wasm apis. I don't have insight on the wasm execution performance because we never really benchmarked it (it wasn't important for our use case since the plugins code is executed only once on app start or when manually triggered from the dashboard).
Out of the loop: WASM for non-web projects
8 projects | reddit.com/r/rust | 1 Jan 2023
Wasmer takes WebAssembly libraries mainstream with WAI
7 projects | news.ycombinator.com | 2 Dec 2022
I'm not entirely convinced Wasmer will ever be able to shake its constant controversies.
I'm by no means a fan of the Bytecode Alliance, and would much prefer a startup tackle the problems that Wasmer is tackling, but between the trademarks , the lackluster response to the trademarks (How did you not know your lawyers were trying to trademark “WebAssembly”? Seriously?) , the working conditions , the drama surrounding the BCA , and everything else, I don't think Wasmer is the right choice either, at least not under current leadership.
Help with having cdylib that gets loaded in C via dlopen and needs to call functions from the code that loads it
4 projects | reddit.com/r/rust | 2 Dec 2022
My advice is to use Wasmer's or Wasmtime's Rust bindings to embed a WebAssembly runtime.
Extism: make all software programmable with WebAssembly
10 projects | reddit.com/r/rust | 1 Dec 2022
Why use this over Wasmer?
Loading and unloading rust libs
2 projects | reddit.com/r/rust | 25 Nov 2022
Use a WebAssembly runtime like wasmtime or wasmer.
Java had an extremely advanced and strict sandbox for many years.
It offered of course also the possibility to blacklist everything by default.
The problem with such a granular sandbox is that it's too complex for most use cases.
When you need to whitelist any and every call to the outside world this becomes very tedious.
That's why Java now removes the sandbox…
Let's see how this works out for WASM.
I guess: Without resorting to using some language(s) with build-in support for capability security a whitelist based sandbox approach won't ever work without issues.
First of all you can forget about C/C++. Everything in this languages assumes free access to the system.
Rust does not have any support for capabilities either (yet, and for the years to come at least).
The best current WASM sandbox implementation, which is in Wasmer not WasmTime, is not more than a FS block. (And the memory safety guaranties you get in any VM language, of course).
I don't find any such feature mentioned in the Wasmer docs. It seems completely without any sandbox! (To stress it once more: All VM languages are memory safe. That's not sandboxing. All the "sandboxed by default" claims are misleading, at least).
That even people here on HN believe in the currently unfulfilled WASM security promises shows only how good the WASM marketing is. This should make you even more skeptical. One should never over promise on security! Java had to learn this the hard way over many years (as their sandbox had have holes in the past, and was also almost impossible to correctly configure).
This test might be useful (although it might be a bit hard to read because of the usage of macros) . We will create a simple example of multivalue to showcase how it can be used
Dozens of malicious PyPI packages discovered targeting developers
23 projects | news.ycombinator.com | 2 Nov 2022
What are some alternatives?
wasmtime - A fast and secure runtime for WebAssembly
SSVM - WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.
wasm3 - 🚀 A fast WebAssembly interpreter, and the most universal WASM runtime
awesome-wasm-runtimes - A list of webassemby runtimes
actix-web - Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.
WAVM - WebAssembly Virtual Machine
Node RED - Low-code programming for event-driven applications
go-plugin - Golang plugin system over RPC.
wasm-bindgen-rayon - An adapter for enabling Rayon-based concurrency on the Web with WebAssembly.