almostnode 0.2.0 → 0.2.1

package/README.md

@@ -64,6 +64,26 @@ const result = container.execute(`
 console.log(result.exports); // "Hello from the browser!"
 ```
 
+> **⚠️ Security Warning:** The example above runs code on the main thread with full access to your page. **Do not use `createContainer()` or `container.execute()` with untrusted code.** For untrusted code, use `createRuntime()` with a cross-origin sandbox - see [Sandbox Setup](#sandbox-setup).
+
+### Running Untrusted Code Securely
+
+```typescript
+import { createRuntime, VirtualFS } from 'almostnode';
+
+const vfs = new VirtualFS();
+
+// Create a secure runtime with cross-origin isolation
+const runtime = await createRuntime(vfs, {
+  sandbox: 'https://your-sandbox.vercel.app', // Deploy with generateSandboxFiles()
+});
+
+// Now it's safe to run untrusted code
+const result = await runtime.execute(untrustedCode);
+```
+
+See [Sandbox Setup](#sandbox-setup) for deployment instructions.
+
 ### Working with Virtual File System
 
 ```typescript
@@ -836,7 +856,7 @@ triggerHMR('/app/page.tsx', iframe);
 ### Setup
 
 ```bash
-git clone https://github.com/user/almostnode.git
+git clone https://github.com/Macaly/almostnode.git
 cd almostnode
 npm install
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "almostnode",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Node.js in your browser. Just like that.",
   "type": "module",
   "license": "MIT",
@@ -17,11 +17,11 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/user/almostnode.git"
+    "url": "https://github.com/Macaly/almostnode.git"
   },
-  "homepage": "https://github.com/user/almostnode#readme",
+  "homepage": "https://github.com/Macaly/almostnode#readme",
   "bugs": {
-    "url": "https://github.com/user/almostnode/issues"
+    "url": "https://github.com/Macaly/almostnode/issues"
   },
   "author": "",
   "engines": {