Hacker News Reader

Why is it their job to check for security? Sandboxing would make the ergonomics significantly worse for running quick scripts with uv run --script

View on HN

I took gp’s comment to mean something more like deno. Deno is nice because you can explicitly allow/deny filesystem, network, etc. in an ergonomic way like `—-allow-fs`

So not sure it would necessarily be ergonomically worse. It could even be a new run command `uv srun` or something…

But uv isn’t a framework, isn’t that the difference, ie why they wouldn’t necessarily think it’s appropriate to delve into that particular territory?

This is like asking why do web browsers need to sandbox javascript. Giving full permissions to untrusted code is an attacker's dream.

Reply on news.ycombinator.com