#isolation

Monorepo for @gotgenes pi packages

Native Rust library for managing control groups under Linux

Extensions for Microsoft Agent Framework

No repository description published.

ZoneTree is a persistent, high-performance, transactional, ACID-compliant ordered key-value database and LSM-tree storage engine for .NET.

A lightweight shell & feature system for ASP.NET Core that lets you build modular and multi-tenant apps with per-shell DI containers and config-driven features.

Safe-by-default script sandbox in Go. Runs programs under default-deny OS isolation on Linux (bubblewrap + Landlock + seccomp): credential shielding, per-host network allowlisting via a host-side CONNECT proxy, resource limits, and a profile-then-grant consent flow. macOS support is planned.

a fast, rootless sandbox and virtual resource runtime. Run any workload in a real container, including an agent's tool-call or LLM-generated code.

Reusable detonation framework: run untrusted documents through disposable, hardened workers

Security-focused sandboxing core running apps via Podman containers or qemu VMs, each walled off from the rest of the desktop. Compositor-agnostic and installs cleanly on any existing system.

SafeStream: atomic and safe manipulation with files via native PHP functions.

CUDA dependency management and process isolation for ComfyUI custom nodes

Library for creating DotNet Web Worker threads/multithreading in Client side Blazor

Symfony bundle to isolate your app's doctrine database tests and improve the test performance

Composer plugin that scopes dependencies for WordPress plugins and themes, keeping WordPress and WooCommerce symbols unprefixed.