Why Deno's runtime features go beyond Node.js - Quick Recap

Recall & Review

beginner

What is one key security feature that Deno has by default which Node.js lacks?

Deno runs code in a secure sandbox by default, requiring explicit permission for file, network, or environment access. Node.js does not have this built-in security model.

beginner

How does Deno handle module imports differently from Node.js?

Deno uses URL-based imports directly from the web without a package manager, while Node.js relies on npm and a centralized package system.

intermediate

Why is Deno considered to have a more modern runtime environment compared to Node.js?

Deno supports TypeScript out of the box, uses ES modules natively, and includes built-in tooling like a formatter and linter, which Node.js requires separate tools for.

intermediate

What built-in tools does Deno provide that help developers without extra setup?

Deno includes a code formatter, linter, test runner, and bundler as part of its runtime, unlike Node.js which needs external packages for these.

advanced

How does Deno's approach to standard libraries differ from Node.js?

Deno offers a curated set of audited standard libraries maintained by the Deno team, promoting stability and security, whereas Node.js standard libraries are more extensive but less curated.

What does Deno require before allowing a script to access the file system?

A An environment variable set

B No permission needed

C A special configuration file

D Explicit permission granted at runtime

Deno enforces security by requiring explicit permission for file system access.

Which module system does Deno use natively?

A AMD

B ES Modules

C CommonJS

D UMD

Deno uses ES Modules natively, unlike Node.js which traditionally used CommonJS.

How does Deno handle TypeScript support?

A Built-in support without extra setup

B Does not support TypeScript

C Requires external compiler

D Supports only JavaScript

Deno has built-in TypeScript support, so no extra compiler setup is needed.

Which of these is NOT a built-in tool in Deno?

A Package manager like npm

B Linter

C Test runner

D Code formatter

Deno does not have a package manager like npm; it uses URL imports instead.

What is a benefit of Deno's curated standard library?

A More third-party packages

B Faster runtime performance

C More security and stability

D Supports older JavaScript versions

Deno's curated standard library focuses on security and stability.

Explain how Deno's security model differs from Node.js and why it matters.

Think about what happens if a script tries to read files without permission.

Describe the advantages of Deno's built-in tooling compared to Node.js.

Consider how many tools you need to install separately in Node.js.

Practice

1. Which of the following is a key security feature that Deno provides by default compared to Node.js?

easy

A. Deno automatically runs all scripts with full system access.

B. Deno requires explicit permission to access files, network, or environment.

C. Deno disables all network access permanently.

D. Deno uses a firewall to block unauthorized connections.

Solution

1. Step 1: Understand Deno's permission model

   Deno requires you to explicitly grant permissions for file, network, or environment access to improve security.

2. Step 2: Compare with Node.js default behavior

   Node.js scripts run with full access by default, unlike Deno's explicit permission system.

3. Final Answer:

   Deno requires explicit permission to access files, network, or environment. -> Option B

4. Quick Check:

   Explicit permissions = Deno security [OK]

Hint: Remember: Deno asks permission before access [OK]

Common Mistakes:

• Thinking Deno runs scripts with full access by default
• Confusing Deno's permission system with firewall rules
• Assuming network access is always blocked

2. Which syntax correctly runs a Deno script with network access permission?

easy

A. deno run --net-allow script.ts

B. deno run --enable-network script.ts

C. deno run --allow-net script.ts

D. deno run --network script.ts

Solution

1. Step 1: Recall Deno permission flags

   Deno uses flags like --allow-net to grant network access explicitly.

2. Step 2: Identify correct flag syntax

   The correct flag is exactly --allow-net; other options are invalid.

3. Final Answer:

   deno run --allow-net script.ts -> Option C

4. Quick Check:

   Correct flag is --allow-net [OK]

Hint: Use --allow-net to enable network access [OK]

Common Mistakes:

• Using incorrect flag names like --net-allow
• Omitting the --allow-net flag when network access is needed
• Confusing permission flags with environment variables

3. What will be the output of this Deno script run with deno run script.ts if the script tries to read a file without permissions?

const data = await Deno.readTextFile("secret.txt");
console.log(data);

medium

A. PermissionDenied: read access to "secret.txt" is not allowed

B. SyntaxError: await used outside async function

C. FileNotFoundError: secret.txt does not exist

D. Contents of secret.txt printed to console

Solution

1. Step 1: Understand Deno's default permissions

   Deno denies file read access unless --allow-read is given.

2. Step 2: Predict error when reading file without permission

   Trying to read a file without permission causes a PermissionDenied error.

3. Final Answer:

   PermissionDenied: read access to "secret.txt" is not allowed -> Option A

4. Quick Check:

   Missing --allow-read causes PermissionDenied [OK]

Hint: No --allow-read means file read fails [OK]

Common Mistakes:

• Assuming file reads succeed without permission
• Confusing file not found with permission error
• Ignoring that await is valid in top-level for Deno

4. Identify the error in this Deno command and fix it:
deno run --allow-net --allow-read script.ts
Script still fails to access environment variables.

medium

A. No fix needed; environment variables are always accessible

B. Remove --allow-net flag to fix environment access

C. Use --allow-env instead of --allow-read

D. Add --allow-env flag to grant environment access

Solution

1. Step 1: Check permissions granted by command

   The command grants network and read permissions but not environment access.

2. Step 2: Identify missing permission for environment variables

   Accessing environment variables requires --allow-env flag.

3. Final Answer:

   Add --allow-env flag to grant environment access -> Option D

4. Quick Check:

   Missing --allow-env blocks env access [OK]

Hint: Add --allow-env to access environment variables [OK]

Common Mistakes:

• Assuming --allow-read covers environment access
• Removing unrelated flags instead of adding missing ones
• Believing environment variables are accessible without permission

5. You want to run a Deno script that uses TypeScript, formats code, lints, and accesses the network securely. Which combination of commands and features best uses Deno's runtime advantages?

hard

A. Use deno run --allow-net script.ts, then run deno fmt and deno lint commands

B. Use deno run --allow-net script.ts and rely on Node.js tools for formatting and linting

C. Run with deno run --allow-net script.ts, then manually install formatter and linter

D. Run script with deno run script.ts without permissions and use external tools for formatting

Solution

1. Step 1: Recognize Deno's built-in tools

   Deno includes built-in formatter (deno fmt) and linter (deno lint) without extra installs.

2. Step 2: Combine permissions and tools properly

   Run script with --allow-net for network, then use deno fmt and deno lint commands for formatting and linting.

3. Final Answer:

   Use deno run --allow-net script.ts, then run deno fmt and deno lint commands -> Option A

4. Quick Check:

   Deno built-in tools + explicit permissions = best practice [OK]

Hint: Use deno fmt and lint with permissions for best workflow [OK]

Common Mistakes:

• Assuming formatter and linter need separate installs
• Running without permissions and expecting network access
• Using Node.js tools instead of Deno's built-in ones