Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Loading and unloading rust libs
2 projects | reddit.com/r/rust | 25 Nov 2022
Use a WebAssembly runtime like wasmtime or wasmer.
Java had an extremely advanced and strict sandbox for many years.
It offered of course also the possibility to blacklist everything by default.
The problem with such a granular sandbox is that it's too complex for most use cases.
When you need to whitelist any and every call to the outside world this becomes very tedious.
That's why Java now removes the sandbox…
Let's see how this works out for WASM.
I guess: Without resorting to using some language(s) with build-in support for capability security a whitelist based sandbox approach won't ever work without issues.
First of all you can forget about C/C++. Everything in this languages assumes free access to the system.
Rust does not have any support for capabilities either (yet, and for the years to come at least).
The best current WASM sandbox implementation, which is in Wasmer not WasmTime, is not more than a FS block. (And the memory safety guaranties you get in any VM language, of course).
I don't find any such feature mentioned in the Wasmer docs. It seems completely without any sandbox! (To stress it once more: All VM languages are memory safe. That's not sandboxing. All the "sandboxed by default" claims are misleading, at least).
That even people here on HN believe in the currently unfulfilled WASM security promises shows only how good the WASM marketing is. This should make you even more skeptical. One should never over promise on security! Java had to learn this the hard way over many years (as their sandbox had have holes in the past, and was also almost impossible to correctly configure).
This test might be useful (although it might be a bit hard to read because of the usage of macros) . We will create a simple example of multivalue to showcase how it can be used
Dozens of malicious PyPI packages discovered targeting developers
23 projects | news.ycombinator.com | 2 Nov 2022
Ask HN: What are the use cases of WASM outside the browser?
2 projects | news.ycombinator.com | 22 Sep 2022
14 projects | news.ycombinator.com | 20 Sep 2022
Please make sure you benchmark with the latest beta of Wasmer! (3.0.0-beta2)
Would it be possible to create a compiler to compile typescript to machine code?
2 projects | reddit.com/r/typescript | 13 Sep 2022
https://wasmer.io offers WebAssembly to native. Haven’t used.
Cpp-like build tools for Rust?
4 projects | reddit.com/r/rustjerk | 9 Sep 2022
Or well, you can be a cursed project and invoke cargo from a Makefile
Lunatic: Erlang-Inspired Runtime for WebAssembly
6 projects | news.ycombinator.com | 5 Sep 2022
What are some alternatives?
wasmtime - A fast and secure runtime for WebAssembly
SSVM - WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.
wasm3 - 🚀 The fastest WebAssembly interpreter, and the most universal runtime
awesome-wasm-runtimes - A list of webassemby runtimes
actix-web - Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.
WAVM - WebAssembly Virtual Machine
Node RED - Low-code programming for event-driven applications
go-plugin - Golang plugin system over RPC.
wasm-bindgen-rayon - An adapter for enabling Rayon-based concurrency on the Web with WebAssembly.