v8-vulnerabilities
native-messaging-nodejs
v8-vulnerabilities | native-messaging-nodejs | |
---|---|---|
3 | 20 | |
206 | 14 | |
- | - | |
10.0 | 6.0 | |
almost 3 years ago | 3 months ago | |
JavaScript | JavaScript | |
- | Do What The F*ck You Want To Public License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
v8-vulnerabilities
-
I wish more developers understood the constant stream of malware that is posted to npm
Why should I trust Node.js team Nodejs : Security Vulnerabilities or V8 v8-vulnerabilities?
-
🦕 Deno 1.31 Supports package.json Dependency File
The problem with Node.js and Deno is relying on and carrying around the non-trivial V8 https://github.com/Zon8Research/v8-vulnerabilities that uses ~40MB. That is one reason QuickJS that uses ~5MB is being compiled to WASI/WebAssembly as the embeddable JavaScript runtime.
-
Roll your own JavaScript runtime, pt. 2
Node.js and Deno do. Explaining V8 is non-trivial, e.g., v8-vulnerabilities.
native-messaging-nodejs
-
Can you make your own JavaScript by implementing ECMAScript standard?
And/or control node and any other programming language from the browser using Native Messaging native-messaging-nodejs.
-
JavaScript Standard Input/Output: Unspecified
We can process asynchronous tasks without blocking reading stdin (e.g., full-duplex).
- Full-duplex streaming with fetch() to and from the browser using Native Messaging
- Browser <=> Node.js fetch() full duplex streaming (working public example using Deno Deploy)
-
I wish more developers understood the constant stream of malware that is posted to npm
WHat do you mean by "contribute"? I download only the node executable using download-node-nightly-executable to run native-messaging-nodejs, servers, or whatever else I decide to experiement on - without downloading any packages.
-
[AskJS] How would you fix this Node.js bug?
I re-wrote the original code substituting using readSync for process.stdin.on('readable', () => {}) and including process.stdout._handle.setBlocking(true) and readFullSync function contributed by a Deno user https://github.com/guest271314/native-messaging-nodejs/blob/main/nm_nodejs.mjs. I wanted to a) get the input message (up to 1MB at a time) echo'ed back to the client; and b) get away from using process.stdin.on('readable', () => {}), rather use an approach that did not include event listeners; c) get away from using CommonJS and package.json and instead use Ecmascript modules without package.json.
-
[AskJS] Cross-Platform Desktop/Web App (with same codebase) - NextJS and Electron?
If you want you can use a Node.js Native Messaging host https://github.com/guest271314/native-messaging-nodejs, Deno, QuickJS, txiki.js, Bun, C, C++, Python, WASI/WebAssembly or whatever language is built in, e.g., Bash.
-
Termino.js: Create command based apps on any website - great for games, chat-bots, animations and real world apps!
I just fetch the nightly node executable, get rid of everything else in the archive, use .mjs extension for import to work without package.json, then I can connect to the host https://github.com/guest271314/native-messaging-nodejs, and start subprocesses, e.g., raw PCM streams, where stdout is streamed to the client (browser), e.g, https://github.com/guest271314/captureSystemAudio/blob/master/native_messaging/capture_system_audio/capture_system_audio_node.js.
-
[AskJS] What is your preferred solution to share and execute Node.js scripts ?
Yes, utilizing Native Messaging https://github.com/guest271314/native-messaging-nodejs.
What are some alternatives?
download-node-nightly-executable - Download node nightly executable
native-messaging-bun - Bun Native Messaging host
npq - 🎖safely* install packages with npm or yarn by auditing them as part of your install process
webcontainer-core - Dev environments. In your web app.
proposal-common-minimum-api
wasmedge-quickjs - A high-performance, secure, extensible, and OCI-complaint JavaScript runtime for WasmEdge.
espeak-ng - eSpeak NG is an open source speech synthesizer that supports more than hundred languages and accents.
ssh2 - SSH2 client and server modules written in pure JavaScript for node.js
native-messaging-bash - Bash Native Messaging host.
native-messaging-deno - Deno Native Messaging Host
native-messaging-python - Python Native Messaging host
qjs-ws - Simple WebSocket server for QuickJS