Post

@kumavis.me I was wondering if you're still using the NPM package name pele and if not whether you'd be willing to donate it for a project I am working on? Cheers! it's in the vein of my recent projects knap and defuddle www.npmjs.com/package/knap www.npmjs.com/package/defu...

npmjs.comnpmjs.com

🪷 kumavis 🪷

@kumavis.me

its yours if you can answer me this question: what is 🌋 lavamoat 🌋?

kepano

@stephango.com

If I understand correctly it's like a sandbox except the moat is made of lava. This is good because lava seems more likely to contain a compromised dependency than wet sand. It's also good because I'm working on obsidian which is made of lava, and I don't know much about SES containers.

6/10/26, 3:18 am0 reposts3 likes

🪷 kumavis 🪷

@kumavis.me

✌️ the lava goddess in me sees the lava goddess in you ✌️

kepano

@stephango.com

thanks a million!!! I'll do my best to not anger her

kepano

@stephango.com

In all seriousness, I have been thinking a lot about permissions for Obsidian plugins, and I hadn't heard about LavaMoat until now. I am digging into it :)

🪷 kumavis 🪷

@kumavis.me

plugin systems are the gateway to malleable software www.inkandswitch.com/essay/mallea... and object capability security (as achieved with SES and hardenedjs.org) is the secure foundation