Am I getting this right?
• Both Node.js and Deno grant permissions to the whole app (network access, file access, etc.).
• Wouldn’t it be better to additionally specify permissions for dependencies? That could prevent a rogue utility library from accessing files even though the app itself is allowed to access them.
Axel Rauschmayer
npub10f…ardvy
2025-07-18 10:44:34 UTC
Author Public Key
npub10faqj7xvgmhhl42glvf9u5wqfhnafjnrjst6yx6k4227xugupvuqzardvySeen on
wss://relay.momostr.pinkPublished at
2025-07-18 10:44:34 UTCEvent JSON
{
"id": "cfccb7610f83353b416a8bbc3ba9dc1d579f48a0dfacc99f82fc8eb47ac2c368",
"pubkey": "7a7a0978cc46ef7fd548fb125e51c04de7d4ca639417a21b56aa95e3711c0b38",
"created_at": 1752835474,
"kind": 1,
"tags": [
[
"proxy",
"https://fosstodon.org/@rauschma/114873825679155785",
"web"
],
[
"proxy",
"https://fosstodon.org/users/rauschma/statuses/114873825679155785",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/rauschma/statuses/114873825679155785",
"pink.momostr"
],
[
"-"
]
],
"content": "Am I getting this right?\n\n• Both Node.js and Deno grant permissions to the whole app (network access, file access, etc.).\n\n• Wouldn’t it be better to additionally specify permissions for dependencies? That could prevent a rogue utility library from accessing files even though the app itself is allowed to access them.",
"sig": "8f89ad5e855f05b52f45d7c533fcd01f2cec486ba449e3143d8b9e0936d6a57196e2a3e038d533f87e9bd7656f998da32e2476b5e4ccb078b9d667b2574c0afd"
}