Ross ROSS = Recommend OSS · open-source software intelligence for agents

ErosZy/sablejs

Run user plugins, rules, formulas, and AI-generated JavaScript safely in browsers. observed · 2026-08-28

github.com/ErosZy/sablejs · JavaScript · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

99/100

  • Activity 99
  • Release rhythm 99
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 0
  • age_days: 2168
  • days_rel: 8
  • days_push: 8
  • n_releases_24m: 6

Full methodology

Adoption not part of the score

1124 stars · 53 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

sablejs is a JavaScript sandbox library that safely executes untrusted, user-authored, or AI-generated JavaScript by AOT-compiling ES5.1 programs to host JavaScript instead of running an embedded VM. It provides data copying, explicit capabilities, source maps, and single-run disposable instances for browser, Worker, and Node environments.

Use cases

  • run user-submitted JavaScript plugins safely in the browser
  • execute AI-generated JavaScript code in a sandbox
  • sandbox untrusted scripts in a web worker with timeouts
  • precompile and cache sandboxed scripts at build time
  • replace QuickJS-WASM with a faster JS sandbox
  • run user-defined rules or formulas securely

When to choose

  • you need to execute untrusted or generated JavaScript with strong host isolation
  • you want sandboxed JS execution without the overhead of a WASM VM
  • you need debuggable sandboxed code with source maps
  • you run user plugins, rules, or formulas in browser or Node

When to avoid

  • you need to run modern ES6+ JavaScript directly without downleveling via Babel or SWC
  • you need full ECMAScript spec compliance or module imports inside the sandbox
  • you need long-lived, multi-run sandboxed execution contexts
  • you need a general-purpose JavaScript runtime rather than a sandbox

Facets

library · maturity active

interpreter security compiler developer-tools web-development security browser cli javascript-sandbox aot-compilation quickjs-alternative untrusted-code-execution plugin-sandbox source-maps web-worker-isolation sandbox javascript nodejs web-server

1 source

Member repositories

RepositoryRoleHealth v2
ErosZy/sablejsmain99

For agents

markdown · JSON · MCP: product_card(name="ErosZy/sablejs")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem