Skip to content
release
BETA
Releases
Tools
Vendors
Trending
$refs.securityHub.focus())"
:aria-expanded="open"
aria-haspopup="menu"
class="inline-flex items-center gap-1 px-3 py-1.5 rounded text-[13px] font-medium transition-colors text-[var(--text-secondary)] dark:text-[var(--text-muted)] hover:text-[var(--text-primary)] dark:hover:text-[var(--text-primary)] hover:bg-[var(--surface-hover)] dark:hover:bg-[var(--surface-elevated)]"
>
Security
Tools
/
JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS
JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS
Build & Package
A production‑ready JavaScript interpreter that executes ES6+ code, JSX, and TypeScript/TSX with React integration without using eval() or new Function().
JavaScript
·
Latest v1.8.5 · 27d ago
Security brief →
Features
Full ES6+ JavaScript support (classes, destructuring, arrow functions, etc.)
Native JSX parsing and execution without pre‑transformation
TypeScript and TSX module support with bundled @sveltejs/acorn-typescript parser
React integration via custom module resolver for hooks and components
CSP‑safe tree‑walking interpreter (no eval or new Function)
REPL, CLI, and programmatic API for interactive and file execution
v1.8.5
Bug fix
·
27d
Fixed support for super.method() calls in arrow-function class fields on derived classes.
Full changelog
Fixed
Support super.method() inside arrow-function class fields on derived classes.
Bind super for prototype methods and class field initializers to parent prototype members with the derived instance as receiver.
Cover computed super[...]() calls, async parent methods, multi-level inheritance chains, and constructor super(...) compatibility.
Verification
npm run build passed. Existing wang-prism CommonJS warning remains unchanged.
npm test: 54 passed, 1359 passed | 4 skipped.
Issue #13 repro returns base.
npm pack --dry-run produced jslike-1.8.5.tgz.
Published to npm as [email protected] with latest dist-tag.
Fixes #13.
v1.8.4
Bug fix
·
27d
Fixed binding of identifiers from defaulted object and array destructuring parameters.
Full changelog
Fixed
Bind identifiers from defaulted object and array destructuring parameters in functions, async callbacks, methods, and constructors.
Preserve nested destructuring defaults and rest parameter behavior through shared parameter binding logic.
Verification
npm run build passed. Existing wang-prism CommonJS warning remains unchanged.
npm test: 54 passed, 1351 passed | 4 skipped.
Issue #12 repro shape returns HiHi!.
npm pack --dry-run produced jslike-1.8.4.tgz.
Published to npm as [email protected] with latest dist-tag.
Fixes #12.
v1.8.3
Bug fix
·
27d
Fixed JavaScript class instance field initialization across inheritance hierarchies.
Full changelog
Fixed
Initialize JavaScript class instance fields, including arrow function fields that capture this.
Apply inherited base class field initializers during super(...) and implicit subclass construction.
Preserve native class-field initialization order across base constructors, derived fields, computed fields, and multi-level inheritance.
Verification
npm run build passed. Existing wang-prism CommonJS warning remains unchanged.
npm test: 53 passed, 1344 passed | 4 skipped.
Issue #11 repro returns {"type":"function","value":42,"keys":["visit","v"]}.
npm pack --dry-run produced jslike-1.8.3.tgz.
Published to npm as [email protected] with latest dist-tag.
Fixes #11.
v1.8.2
Bug fix
·
27d
Fixed missing-method errors when reflection traps throw during method suggestion collection.
Full changelog
Fixed
Prevent enhanced method suggestions from invoking strict function caller / arguments accessors or other throwing accessor properties while constructing missing-method errors.
Keep missing-method errors best-effort when reflection traps throw during method suggestion collection.
Verification
npm run build passed. Existing wang-prism CommonJS warning remains unchanged.
npm test: 52 passed, 1336 passed | 4 skipped.
npm pack --dry-run produced jslike-1.8.2.tgz.
Published to npm as [email protected] with latest dist-tag.
Fixes #10.
v1.8.1
Bug fix
·
27d
Fixed handling of mixed import bindings preserving runtime values.
Full changelog
Fixed
Elide regular TypeScript imports whose local bindings are used only in type positions, matching TypeScript transpilation behavior.
Preserve runtime binding for mixed imports, default imports, namespace imports, and TSX component imports when they are referenced in value positions.
Verification
npm run build passed. Existing wang-prism CommonJS warning remains unchanged.
npm test: 52 passed, 1332 passed | 4 skipped.
Corrected issue #9 repro against dist/index.cjs returns 7.
Published to npm as [email protected] with latest dist-tag.
Fixes #9.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Releases per month
Releases per month, last 12 months.
Cadence
7.0 / wk
Last release
3d
Release size
7
Tracked
10
Security score
6.5/10
OpenSSF
—
Open CVEs
0
Active maintainer
Community
GitHub stars
12
Forks
1
Open issues
0
Open PRs
0
Stars/wk velocity
0.0
About
Languages
JavaScript
·
TypeScript
View on GitHub
Live demo
{ copied = true; setTimeout(() => copied = false, 2000) })"
class="flex items-center gap-1.5 text-[12px] text-[var(--text-muted)] dark:text-[var(--text-muted)] hover:text-[var(--accent)] dark:hover:text-[var(--accent)] transition-colors"
>
About
Languages
JavaScript
·
TypeScript
View on GitHub
Live demo
{ copied = true; setTimeout(() => copied = false, 2000) })"
class="flex items-center gap-1.5 text-[12px] text-[var(--text-muted)] dark:text-[var(--text-muted)] hover:text-[var(--accent)] dark:hover:text-[var(--accent)] transition-colors"
>
© 2026 releaseport. All rights reserved.
Feed
Tools
Feeds
Security
Brief
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for " "
⌘K to open
↑↓ navigate
⏎ open