Did you know Cruft is the only JS runtime to employ its own Brotli? We’re marked safe from this one!
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
Cruft is the only JavaScript engine with a sound type language, checked at runtime and fully interoperable with Typescript and JS. cruft.sh/cruftscript
Cruft is the only JS runtime to implement its own TLS. No BoringSSL, no OpenSSL. Just TLS and crypto from first principles. cruft.sh/docs/tls-and-crypto
Cruft is the only JS runtime that includes native support for Node, Bun, and Deno globals. cruft.sh/docs/coming-from-de…
Cruft ships a WASM engine called Zoom; the only JS and WASM pair outside V8, JavaScriptCore and SpiderMonkey. Learn more here! cruft.sh/docs/webassembly
Worried about supply chain attacks? Our Rust 🦀 JS engine vendors only Cranelift and libc. We own everything else. Download the source and compile a release build in ~1 minute!
github.com/cruftless-dev/cru…
Read more here! cruft.sh/blog/cruft-server-c…




