yt-dlp can use deno, node, quickjs and bun so it’s not stuck. I’m investigating as I had no idea why deno is preferred; I found in the manpage that “node and bun are still considered insecure”, apparently because the scripts that yt-dlp fetches and executes are not run in a sandbox. It looks like quickjs could be very very slow until somewhat recently. The yt-dlp doesn’t mention issues with sandboxing for quickjs but the quickjs documentation doesn’t contain the word “sandbox” so I’m not completely sure what the status is (either it’s fully on, or fully off).
yt-dlp can use deno, node, quickjs and bun so it’s not stuck. I’m investigating as I had no idea why deno is preferred; I found in the manpage that “node and bun are still considered insecure”, apparently because the scripts that yt-dlp fetches and executes are not run in a sandbox. It looks like quickjs could be very very slow until somewhat recently. The yt-dlp doesn’t mention issues with sandboxing for quickjs but the quickjs documentation doesn’t contain the word “sandbox” so I’m not completely sure what the status is (either it’s fully on, or fully off).
score 1 · canonical
Node.js grew a Deno-style permission model in version 22.13 in January 2025: https://nodejs.org/en/blog/release/v22.13.0
score 1 · canonical