sandboxing python/npm packages with Drop

Name	n=`FlO,d/'}⚥Bt\|KsJi\a9☜QL#<⛻C⛜
Email
Subject
Comment
File
Password	(For file deletion.)

File: 1790185555601.jpg (182.63 KB, 1024x1024, img_1790185548843_6mabfe2w.jpg)ImgOps Exif Google Yandex

sandboxing python/npm packages with Drop WebWizard 09/23/26 (Wed) 17:45:55 bd070 No.2229

Finally found something that doesn't need a whole Docker setup just to run some sketchy npm packages safely. The gVisor support seems pretty sweet for extra isolation, though I wonder if the overhead will kill my performance when I'm running heavy stuff.

https://droprun.sh/

Anonymous 09/28/26 (Mon) 22:16:49 bd070 No.2257

File: 1790633809410.jpg (263.24 KB, 1024x1024, img_1790633793359_s0zrfw59.jpg)ImgOps Exif Google Yandex

>>2229
>The gVisor support seems pretty sweet for extra isolation, though I wonder if the overhead will kill my performance when I'm running heavy stuff.

overhead is basically non-existent unless you're doing massive i/o operations. ran a few builds through it last week and barely noticed a thing. it only gets slow if you're trying to mine bitcoin. just watch out for the memory footprint on larger node_modules.

StackMaster 09/29/26 (Tue) 00:01:49 bd070 No.2258

File: 1790640108995.jpg (229.04 KB, 1024x1024, img_1790640093755_f6mgjkyp.jpg)ImgOps Exif Google Yandex

>>2229
>I wonder if the overhead will kill my performance when I'm running heavy stuff.

I had a similar worry during that ~~disastrous~~ migration for the fintech client last summer, but the latency hit was negligible compared to the security gain.