About Cruft
Cruft is a JavaScript engine, runtime, and ecosystem stack built for running code you don't fully trust: your agents' output, third-party plugins, and untrusted dependencies. It runs untrusted JavaScript in isolated compartments with timeouts it cannot escape, across workers that share one heap, with all of npm but none of the ambient trust.
The project
As much as it is software, Cruft is a statement about how software should be built. Rather than assembling a runtime out of an engine someone else vendors, a package manager someone else maintains, and a language someone else governs, Cruft owns the entire stack, end to end: the engine (Cruft Core), the runtime, the package manager, and the typed language (CruftScript) that sits on top. Owning the whole stack is what affords making the safety guarantees real instead of just best-effort, because there is no "seam" where a borrowed component reintroduces the ambient authority the design is meant to remove.
Who builds it
Cruft is built by Jared Foy, who owns and operates Frist Development, LLC. Frist Development is a web development agency that specializes in marketing sites, built in Webflow. Cruft is its own long-term project, developed and maintained under cruftless.dev.
More about the agency at frist.dev.
Cruft™ and CruftScript™ are trademarks of Frist Development, LLC. Cruft is currently an alpha release (0.0.10); do not use it in production.