Does the worker runtime of the online production environment also use node js + isolated-vm?

[lilong7676]

Describe alternatives you've considered
I wonder if there will be any security and performance issues using this in a production environment?

[QuiiBz]

isolated-vm should be safe - see the "Security" section on their README: https://github.com/laverdet/isolated-vm#security

But you're right, using Node.js + isolated-vm isn't the best idea to have high-performance, production-ready services. That's why we're currently rewriting to Rust the Runtime, Serverless and CLI packages:

• feat: rust runtime #96
• feat: initial rust runtime #136
• feat(cli): introduce rust cli #140

There are many advantages, but the most noticeable are:

• Safer and faster code (using v8 directly in Rust, instead of running code in Node.js that calls v8 that calls users code)
• Less resources usage (will share differences on Twitter, @tomlienard)

[lilong7676]

Thanks for the reply, looking forward to your progress！