
We ran Node’s permission model for a week — here’s what broke
Running a real service under file system restrictions surfaced four failures we did not predict — including a dependency spawning a subprocess at import.
Opinions are cheap in this industry, so ours come with sources. Everything below leans on public data — the HTTP Archive’s Web Almanac, Stack Overflow’s Developer Survey, GitHub’s Octoverse — and every number is linked to where it came from.

Running a real service under file system restrictions surfaced four failures we did not predict — including a dependency spawning a subprocess at import.