An open-source research prototype of a Webpack plugin for isolating untrusted browser-side npm dependencies in per-library QuickJS WebAssembly sandboxes. It generates proxy modules, applies deny-by-default capability policies, mediates host interaction through membranes, and includes compatibility testing and browser security evaluations.
javascript typescript webpack webpack-plugin webassembly wasm javascript-sandbox browser-security quickjs supply-chain-security capability-based-security dependency-isolation
-
Updated
Aug 6, 2026 - JavaScript