Jun 28, 2026 Your dependencies can read your environment variables. JavaScript lets them. Ambient authority means any code in your Node.js process can touch the filesystem, network, and environment. capability-based-securityjavascriptambient-authoritysandboxing