[devwinportable]

why not add an android-style permission flags on nodeJS?

eg) nodejs profile with:

- exec disabled

- file write access limited to ./tmp, ./docs, ./tests

- file read access limited to ./tmp, ./docs

- network listening: port 1000~11000 allowed

And why not have a 'sesame points' system for dependencies?

eg)

- ownership-change within 3 weeks: -20 points,

- static analysis finds something wrong: -20 points

- badges: 'file-read badge', 'exec-badge', etc.

[mAritz]

Isn't the first part of your suggestion handled on OS level anyways? Aka. restricted user access, SELinux, AppArmor etc.