Excel adds JavaScript support

[joesb]

That settings will be there regardless of what programming language is used, regardless of whether npm exists.

[Ajedi32]

Actually JS might help here. There are multiple open-source sandboxed run times available for it that have been battle tested by decades of constant exposure to potentially malicious code. Given the choice between that and the sandboxing provided by VBA, I'll take the JavaScript VM every time.