# asvd/jailed

execute untrusted code with custom permissions

Repository: https://github.com/asvd/jailed
Canonical: https://ross.abutalabs.com/products/jailed
Language: JavaScript
License: MIT
License Family: permissive
Last push: 2020-03-11T11:58:21+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 4395, "days_push": 2366, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1026, forks 66 (observed 2026-08-28T04:03:16.756461+00:00)

## What it is
Jailed is a small dependency-free JavaScript library for executing untrusted code in a sandbox with custom permissions. It runs code as a restricted subprocess in Node.js or inside a sandboxed iframe web-worker in the browser, communicating via message-based function exports.

## Use cases
- safely execute user-submitted JavaScript code
- run untrusted code in a sandbox with restricted permissions
- embed third-party plugins with a limited API surface
- export specific functions into a sandboxed environment
- execute code from a string or file in an isolated worker
- build an isomorphic sandbox that works in Node.js and the browser

## When to choose
- you need to run untrusted or third-party JavaScript with fine-grained function-level permissions
- you want a lightweight, dependency-free sandbox that works in both Node.js and browsers
- you need to interrupt or control plugin execution from the host application

## When to avoid
- you need strong security guarantees against determined attackers, since iframe/subprocess sandboxing can be bypassed in some environments
- you need high-performance synchronous communication with sandboxed code
- the project appears unmaintained and may not receive security fixes

## Facets
- artifact type: library
- maturity: maintenance
- function: security, plugin-system, serialization
- domain: security, developer-tools, web-development
- platform: browser
- tags: sandbox, untrusted-code, isomorphic, web-worker, iframe-sandbox, capability-based-security, nodejs, javascript

## Member repositories
- asvd/jailed (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:16.756461+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:07:57.372647+00:00, confidence not recorded.
  - readme: https://github.com/asvd/jailed (fetched 2026-08-28T04:03:16.756461+00:00, sha a675556e783b)
  - registry_npm: https://registry.npmjs.org/jailed (fetched 2026-08-29T13:08:06.664026+00:00, sha 9980be6cc5b2)
- Data as of 2026-08-30T08:39:29.467469+00:00.