A pure Python JavaScript sandbox engine based on MQuickJS
Project description
micro-javascript
A pure Python JavaScript engine, inspired by MicroQuickJS.
Overview
This project provides a JavaScript execution environment with:
- Memory limits - Configurable maximum memory usage
- Time limits - Configurable execution timeout
- Pure Python - No C extensions or external dependencies
- Broad ES5+ support - Variables, functions, closures, classes, iterators, promises, regex, and more
How it was built
Most of this library was built using Claude Code for web - here is the 15+ hour transcript.
Installation
pip install micro-javascript
Usage
from microjs import Context
# Create a context with optional limits
ctx = Context(memory_limit=1024*1024, time_limit=5.0)
# Evaluate JavaScript code
result = ctx.eval("1 + 2") # Returns 3
# Functions and closures
ctx.eval("""
function makeCounter() {
var count = 0;
return function() { return ++count; };
}
var counter = makeCounter();
""")
assert ctx.eval("counter()") == 1
assert ctx.eval("counter()") == 2
# Regular expressions
result = ctx.eval('/hello (\\w+)/.exec("hello world")')
# Returns ['hello world', 'world']
# Error handling with line/column tracking
ctx.eval("""
try {
throw new Error("oops");
} catch (e) {
// e.lineNumber and e.columnNumber are set
}
""")
Setting and Getting Variables
Use set() and get() to pass values between Python and JavaScript:
ctx = Context()
# Set a Python value as a JavaScript global variable
ctx.set("x", 42)
ctx.set("name", "Alice")
ctx.set("items", [1, 2, 3])
# Use the variable in JavaScript
result = ctx.eval("x * 2") # Returns 84
result = ctx.eval("'Hello, ' + name") # Returns 'Hello, Alice'
result = ctx.eval("items.map(n => n * 2)") # Returns [2, 4, 6]
# Get a JavaScript variable back into Python
ctx.eval("var total = items.reduce((a, b) => a + b, 0)")
total = ctx.get("total") # Returns 6
Exposing Python Functions to JavaScript
You can expose Python functions to JavaScript by setting them as global variables:
ctx = Context()
# Define a Python function
def add(a, b):
return a + b
# Expose it to JavaScript
ctx.set("add", add)
# Call it from JavaScript
result = ctx.eval("add(2, 3)") # Returns 5
Primitive values (numbers, strings, booleans) are passed directly as Python types, and primitives returned from Python functions work in JavaScript.
Arrays and objects are passed as internal JavaScript types (JSArray, JSObject). To return objects that JavaScript can use, return JSObject instances:
from microjs.values import JSObject, JSArray
ctx = Context()
# Access array elements via ._elements
def sum_array(arr):
return sum(arr._elements)
ctx.set("sumArray", sum_array)
result = ctx.eval("sumArray([1, 2, 3, 4, 5])") # Returns 15
# Return a JSObject for JavaScript to use
def make_point(x, y):
obj = JSObject()
obj.set("x", x)
obj.set("y", y)
return obj
ctx.set("makePoint", make_point)
result = ctx.eval("var p = makePoint(10, 20); p.x + p.y;") # Returns 30
Supported Features
- Core: variables, operators, control flow, functions, closures
- Objects: object literals, prototypes, getters/setters, JSON
- Arrays: literals, methods (map, filter, reduce, etc.), typed arrays
- Functions: arrow functions, rest/spread, default parameters
- Classes: class syntax, inheritance, static methods
- Iteration: for-of, iterators, generators
- Async: Promises, async/await
- Regex: Full regex support with capture groups, lookahead/lookbehind
- Error handling: try/catch/finally with stack traces
Known Limitations
See open-problems.md for details on:
- Deep nesting limits (parser uses recursion)
- Some regex edge cases with optional lookahead captures
- Error constructor location tracking
Development
This project uses uv for dependency management.
# Run tests
uv run pytest
License
MIT License - see LICENSE file.
Based on MicroQuickJS by Fabrice Bellard.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file micro_javascript-0.1a2.tar.gz.
File metadata
- Download URL: micro_javascript-0.1a2.tar.gz
- Upload date:
- Size: 68.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6d78774bb190681a10dc906cd6a6aef9e0335b6c9aed85004ecf5345b7146c3c
|
|
| MD5 |
c659a545adb69ab1302c2eae95860e8b
|
|
| BLAKE2b-256 |
72e6da1bc11caec31cc28a818c673f7bc5e1bee21440404bd5d1c5b0fb1cd318
|
Provenance
The following attestation bundles were made for micro_javascript-0.1a2.tar.gz:
Publisher:
publish.yml on simonw/micro-javascript
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
micro_javascript-0.1a2.tar.gz -
Subject digest:
6d78774bb190681a10dc906cd6a6aef9e0335b6c9aed85004ecf5345b7146c3c - Sigstore transparency entry: 779445911
- Sigstore integration time:
-
Permalink:
simonw/micro-javascript@5284c2d5416ed920ed1f163e4a595a1d1b5d3159 -
Branch / Tag:
refs/tags/0.1a2 - Owner: https://github.com/simonw
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@5284c2d5416ed920ed1f163e4a595a1d1b5d3159 -
Trigger Event:
release
-
Statement type:
File details
Details for the file micro_javascript-0.1a2-py3-none-any.whl.
File metadata
- Download URL: micro_javascript-0.1a2-py3-none-any.whl
- Upload date:
- Size: 75.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
330059921fb5e55e637b68e1401907fe3f1ebe5584eb1a302a96401c344bf3c4
|
|
| MD5 |
2ba171b220f17b9ac5c0ee7e6c8c3b08
|
|
| BLAKE2b-256 |
a638b5bbf98ba538da1c998beaba36b0ee0d9aaaeafecff0ebed257c5a6e04de
|
Provenance
The following attestation bundles were made for micro_javascript-0.1a2-py3-none-any.whl:
Publisher:
publish.yml on simonw/micro-javascript
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
micro_javascript-0.1a2-py3-none-any.whl -
Subject digest:
330059921fb5e55e637b68e1401907fe3f1ebe5584eb1a302a96401c344bf3c4 - Sigstore transparency entry: 779445919
- Sigstore integration time:
-
Permalink:
simonw/micro-javascript@5284c2d5416ed920ed1f163e4a595a1d1b5d3159 -
Branch / Tag:
refs/tags/0.1a2 - Owner: https://github.com/simonw
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@5284c2d5416ed920ed1f163e4a595a1d1b5d3159 -
Trigger Event:
release
-
Statement type: