Afterburner – Capability-Sandboxed JavaScript/TS Runtime in Rust

Afterburner is a Rust-based JavaScript/TypeScript runtime designed for embedding, featuring a built-in capability sandbox that locks down scripts by default—blocking network, filesystem, and environment access unless explicitly granted. It targets developers who need to run untrusted or third-party code safely within their applications, such as in plugins, automation, or serverless environments. Its interest lies in combining Rust’s performance and safety with a granular, opt-in permission model, offering a lightweight alternative to full containerization for secure code execution.