Go
fencesandbox/fence
Lightweight, container-free sandbox for running commands with network and filesystem restrictions
Apache-2.0Sep 14, 2026 · metrics 2.10.0
All tags
Catalogue tag
#bubblewrap
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
7 records
npm
anthropic-experimental/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
whiskeyjimbo/bento
Safe-by-default script sandbox in Go. Runs programs under default-deny OS isolation on Linux (bubblewrap + Landlock + seccomp): credential shielding, per-host network allowlisting via a host-side CONNECT proxy, resource limits, and a profile-then-grant consent flow. macOS support is planned.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
willow-memory/kartikeya
Kartikeya — standalone bwrap-sandboxed task queue + worker (the Willow fleet's Kart engine, extracted). Backend-agnostic: SQLite or Postgres.
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
carderne/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
crates.io
santhreal/procjail
Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout
MITSep 15, 2026 · metrics 2.10.0
npm
NelsonYong/lite-agent-sdk
Agent SDK
MITSep 9, 2026 · metrics 2.10.0