New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

codemcp-executor-quickjs

Package Overview
Dependencies
Maintainers
1
Versions
7
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

codemcp-executor-quickjs

Tier 0 codemcp executor: QuickJS compiled to WebAssembly, running on a Node worker thread with memory, stack and deadline limits.

Source
npmnpm
Version
0.3.0
Version published
Weekly downloads
829
Maintainers
1
Weekly downloads
 
Created
Source

codemcp-executor-quickjs

The default sandbox (tier 0). Each execution gets a fresh QuickJS runtime, compiled to WebAssembly, inside a fresh Node worker thread.

Limits are enforced in layers that do not rely on the guest cooperating: QuickJS memory, stack and deadline interrupts; the worker's own V8 heap cap; and a host-side timer that terminates the worker.

The guest sees two string-only host functions. Everything else (tools.*, console) is built in the guest prelude on top of them.

import { QuickJsExecutor } from "codemcp-executor-quickjs";

const executor = new QuickJsExecutor({ timeoutMs: 10_000 });
const result = await executor.execute("return await tools.echo.say({ hi: 1 });", {
  "echo.say": async (args) => args,
});

Passes every case in codemcp-conformance.

FAQs

Package last updated on 29 Oct 2026

Related posts