I really appreciate the engineering effort went into this "JavaScript interpreter"
https://github.com/yt-dlp/yt-dlp/blob/2025.09.23/yt_dlp/jsin...
https://github.com/yt-dlp/yt-dlp/blob/2025.09.23/yt_dlp/jsin...
Here are lines 431 through 433:
if expr.startswith('new '):
obj = expr[4:]
if obj.startswith('Date('):Basically any publicly known method that can sip video content with doing the least work and authentication will be a common point of attack for this.
The submission is literally about them moving away from it in favor of Deno, so I think "never" probably gets pretty close.