> I think at some point it will have to be a language level feature. The ability to sandbox or provide permissions to packages/functions. > If I could download

> I think at some point it will have to be a language level feature. The ability to sandbox or provide permissions to packages/functions. > If I could download a module, and tell the compiler this module, and everything it uses (including packages that I also use, but through a different call tree) Javascript's prototype based inheritance looks like it can help facilitate such conditional submodule invocation. But, and partially for performance reasons, static compiling would be necessary. So Javascript and its dominant NPM package ecosystem can never go in a direction like this. If only C++ or Python (dynamically typed, I know) had prototypes instead of class based inheritance. Edit: Looks like another commenter referenced what we're probably talking about: > Now, about the technical solution to this. We have this, for well defined programming languages (read: statically typed ones, or dynamically typed ones with a clear structure). > It's a linker. Tech from the 1950s. > Link (include) just the stuff you want, "tree shake"/"remote dead code" whatever you don't. Can we create an open source linker for JavaScript and NPM packages?