I started working on Nasscad back in early March with the assistance of Claude AI, and it led to Nasscad: a lightweight, powerful, and uncompromising CAD tool. I used to be allergic to HTML, Node.js, and the like. But we have to face the reality that the web stack dominates now—bringing along HTML, CSS, JavaScript, Wasm, frontend, and backend.
I’ve worked with Wasm for about 6 years now (founded a company around it that got acquired, even)
Even though our product was not a commercial success ~3 yrs ago I still believe something like this should succeed and give people choice when it comes to isolation/virtualization (containers, microVMs, Wasm). They are each useful and appropriate for different things.
I think that this is a plugin library for teams that want to offer a platform for the public (or an LLM-AI) to submit code to. If your team writes some code, you don't generally sandbox it from yourself, you just amend your program: you don't need a sandbox. But, if you want to run code that you don't trust, you should run it in a way that prevents it from causing problems if it is actually dangerous (like a virus or accidentally overwrites your files with blank files). That's what a sandbox like kyushu promises to do.
So, with a sandbox library like this, you could - say - write a website that hosts games (like itch.io or newgrounds) that hosts games on the world wide web. The sandbox part can give you confidence that, if a villain's programmer henchmen uploads a virus instead of a game, it can't infect your platform or other games on the website. Or, if a LLM-AI written game is accidentally tries to take up all the memory of the computer, it can't ask the operating system for more than is in the sandbox.
Others mentioned better use cases than I could probably come with. Not sure it's a strong use case but, one thing I could maybe mention too is the fact that it ships as a standalone artifact. It's portable and, if reproducible, can provide some sort of guarantee on what's effectively running for those who care.
ELI5: Imagine you want to run a heavy, powerful 3D video game engine inside a standard web browser or a lightweight desktop app, without making it slow or unsafe.
JavaScript alone can't handle that kind of heavy lifting efficiently. That’s where Wasm comes in. It lets you run high-performance native code (like C++) at near-native speed safely in the sandbox.
For example, I'm currently using Wasm to run a complex 3D geometry engine (Manifold) inside a lightweight CAD app (Nasscad). It gives you web flexibility with desktop power.
I think they are asking about the tool itself, not WASM.
This tool seems useful for running 0 dependency JavaScript with isolation through web assembly as an alternative to the isolation and ease of use provided by tools such as cloudflare workers.
You can definitely run workerd in production on your own machines and some people do.
The biggest catch is that workerd's implementation of Durable Objects currently doesn't work across multiple machines, but I'm working on fixing that: https://github.com/cloudflare/workerd/pull/6780
Thx! I thought about adding a context to the fetch handler, could be handy for local testing. Likewise, local commands (e.g. dev or watch mode) are not yet there. Those would be next on the line if the CLI starts getting used by others than me.
Thanks! It's actually the first time I started "designing" (I'm definitely not one) everything by picking the theme for the code snippets first. That's why the same colors are reused on the site and even in the logo.
the customer testimonials were enough to earn my github star
related: "Kefka is a Go-native shell sandbox with coreutils, Python via WebAssembly, and more" https://xeiaso.net/blog/2026/dancing-mad-sandboxing/
I started working on Nasscad back in early March with the assistance of Claude AI, and it led to Nasscad: a lightweight, powerful, and uncompromising CAD tool. I used to be allergic to HTML, Node.js, and the like. But we have to face the reality that the web stack dominates now—bringing along HTML, CSS, JavaScript, Wasm, frontend, and backend.
I’ve worked with Wasm for about 6 years now (founded a company around it that got acquired, even)
Even though our product was not a commercial success ~3 yrs ago I still believe something like this should succeed and give people choice when it comes to isolation/virtualization (containers, microVMs, Wasm). They are each useful and appropriate for different things.
Loving the customer testimonials :D ..
If someone feels like an eli5 - What are the use-cases for something like this?
I think that this is a plugin library for teams that want to offer a platform for the public (or an LLM-AI) to submit code to. If your team writes some code, you don't generally sandbox it from yourself, you just amend your program: you don't need a sandbox. But, if you want to run code that you don't trust, you should run it in a way that prevents it from causing problems if it is actually dangerous (like a virus or accidentally overwrites your files with blank files). That's what a sandbox like kyushu promises to do.
So, with a sandbox library like this, you could - say - write a website that hosts games (like itch.io or newgrounds) that hosts games on the world wide web. The sandbox part can give you confidence that, if a villain's programmer henchmen uploads a virus instead of a game, it can't infect your platform or other games on the website. Or, if a LLM-AI written game is accidentally tries to take up all the memory of the computer, it can't ask the operating system for more than is in the sandbox.
Haha, glad someone noticed those testimonials ;)
Others mentioned better use cases than I could probably come with. Not sure it's a strong use case but, one thing I could maybe mention too is the fact that it ships as a standalone artifact. It's portable and, if reproducible, can provide some sort of guarantee on what's effectively running for those who care.
ELI5: Imagine you want to run a heavy, powerful 3D video game engine inside a standard web browser or a lightweight desktop app, without making it slow or unsafe.
JavaScript alone can't handle that kind of heavy lifting efficiently. That’s where Wasm comes in. It lets you run high-performance native code (like C++) at near-native speed safely in the sandbox.
For example, I'm currently using Wasm to run a complex 3D geometry engine (Manifold) inside a lightweight CAD app (Nasscad). It gives you web flexibility with desktop power.
> powerful 3D video game engine inside a standard web browser [...] JavaScript alone can't handle that kind of heavy lifting efficiently.
True... but also WebGL/WebGPU on Vulkan/Metal/etc is a thing. You can run shaders on your GPU via the Web already.
I think they are asking about the tool itself, not WASM.
This tool seems useful for running 0 dependency JavaScript with isolation through web assembly as an alternative to the isolation and ease of use provided by tools such as cloudflare workers.
Thanks for that!
cool idea of a self-hostable alternative ot CF workers without much overhead, compiling it down to a binary makes local testing way easier.
I thought CF workers could be self-hosted? I haven't tried that system but saw Kenton Varda tweeting about running them locally for development.
Yes, the Cloudflare Workers Runtime is open source: https://github.com/cloudflare/workerd
You can definitely run workerd in production on your own machines and some people do.
The biggest catch is that workerd's implementation of Durable Objects currently doesn't work across multiple machines, but I'm working on fixing that: https://github.com/cloudflare/workerd/pull/6780
Thx! I thought about adding a context to the fetch handler, could be handy for local testing. Likewise, local commands (e.g. dev or watch mode) are not yet there. Those would be next on the line if the CLI starts getting used by others than me.
nice site design
Thanks! It's actually the first time I started "designing" (I'm definitely not one) everything by picking the theme for the code snippets first. That's why the same colors are reused on the site and even in the logo.