It seems to me that the Javascript runs in the client. The Javascript side calls the system via the local network, passing through this router: https://github.

It seems to me that the Javascript runs in the client. The Javascript side calls the system via the local network, passing through this router: https://github.com/neutralinojs/neutralinojs/blob/master/core-linux/src/router.cpp https://github.com/neutralinojs/neutralinojs/blob/master/cor... I hope that there is some form of authentication to make sure no random web apps are accessing the API.