endojs/endo

Health v2 · maintenance only

Adoption not part of the score

1053 stars · 91 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Endo is a JavaScript framework for building secure plugin systems and resisting supply chain attacks, built on the SES (Secure ECMAScript) implementation of Hardened JavaScript. It provides in-process confinement via compartments, object-capability security, and distributed communication through Eventual Send and capability transport protocols such as CapTP and OCapN.

Use cases

• sandbox untrusted third-party javascript code inside my application
• run third-party plugins with least privilege in node or the browser
• protect my app against supply chain attacks from npm dependencies
• prevent runtime prototype pollution attacks in javascript
• call methods on remote objects securely across processes or the network
• harden javascript globals with frozen intrinsics and secure compartments
• pass messages safely between web workers
• build a multi-tenant system where components don't trust each other

When to choose

• You need to execute untrusted or third-party JavaScript with strict in-process confinement rather than OS-level isolation
• You are building a plugin or smart-contract system where components must not gain ambient authority
• You need capability-based, transport-agnostic message passing between workers, processes, or network peers
• You maintain a security-critical web app or browser extension (like MetaMask) that must mitigate supply chain attacks

When to avoid

• You only need general-purpose RPC or JSON serialization without security or capability guarantees
• You need to sandbox non-JavaScript code or require strong OS/process-level isolation
• Your codebase cannot adopt hardened JavaScript constraints such as frozen intrinsics and mandatory strict mode

Facets

framework · maturity stable

security plugin-system rpc concurrency serialization security developer-tools microservices web-development browser cross-platform ses hardened-javascript sandbox object-capabilities capability-based-security supply-chain-security prototype-pollution eventual-send captp ocapn compartments least-authority secure-ecmascript multi-tenant nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="endojs/endo")