Because it uses Deno under the hood, we get sandboxing "for free", and can enable or disable various features (filesystem, network etc...) via superuser Postgres GUCs.
It's still alpha quality software, but works reliably in my testing and I've implemented all of:
- Typescript support
- NPM Packages via deno import urls
- Complex Postges types like Record and JSONB
- An interface for calling back into Postgres
Try it out and open an issue with any feedback!