
okedeji/mcpvesselCage untrusted MCP servers in containers, compose them into agents, and share them over any OCI registry. Signed, sandboxed, no Docker required.
Go★ 4Sep 20, 2026
npm51Moderatehealth index

R1ck404/NodepodNode.js inside the browser. Filesystem, shell, npm packages, and HTTP servers. Source-available under MIT + Commons Clause.
TypeScript★ 181↓ 74.9K/moSep 13, 2026
npm51Moderatehealth index
TypeScript★ 1↓ 74.6K/moSep 17, 2026
npm51Moderatehealth index
TypeScript · JavaScript★ 1↓ 418/moOct 20, 2026
Hex51Moderatehealth index
Elixir★ 209↓ 2,564/moSep 9, 2026
npm51Moderatehealth index

lyraai-protocol/lyraA Sui-native, policy-bound, non-custodial AI finance agent. Natural-language goals → policy-checked PTBs, executed only within approved on-chain scope, with auditable Walrus receipts.
TypeScript★ 1↓ 353/moSep 13, 2026
crates.io51Moderatehealth index

santhreal/procjailProcess sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout
Rust★ 0↓ 8,250/moSep 15, 2026
npm · PyPI · Go51Moderatehealth index

stricttools/testisolationUncompromising test isolation: your tests structurally cannot touch your real files, secrets, or git identity -- First-class support for Go, Python with pytest, and TypeScript with Node
Python · Go · TypeScript★ 0↓ 907/moOct 9, 2026
Go · NuGet50Moderatehealth index

arturoeanton/go-vmnetA pure-Go IL/CIL interpreter for running real C# assemblies and NuGet packages inside a Go program — no .NET runtime installed on the host.
Go★ 3Sep 12, 2026
Python★ 0↓ 2,214/moSep 12, 2026
Go★ 7Sep 14, 2026
TypeScript★ 4↓ 4,121/moSep 9, 2026
Go★ 1Sep 19, 2026
Go★ 2Sep 11, 2026
PyPI · npm42Weakhealth index
Python★ 0↓ 13.5K/moOct 11, 2026
npm · PyPI · RubyGems +142Weakhealth index

withruntime/runtimeSandboxes for AI agents: TypeScript, Python, Go, Java and Ruby SDKs, the runtime CLI, an MCP server, and agent integrations. Firecracker microVMs.
TypeScript · Python★ 1↓ 8,162/moOct 18, 2026
Go★ 0Sep 12, 2026

xshellz/xshellz-goOfficial Go SDK for xShellz sandboxes — spawn a throwaway, kernel-isolated Linux box and run commands in it from your code. go get github.com/xshellz/xshellz-go
Go★ 1Sep 12, 2026
JavaScript★ 18↓ 120.7K/moSep 9, 2026
JavaScript · Python · PowerShell★ 0↓ 2,040/moSep 10, 2026
JavaScript★ 620↓ 2,642/moSep 20, 2026

slopus/happyMobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 23.8K↓ 44.9K/moSep 16, 2026
JavaScript★ 194↓ 71.4M/moSep 15, 2026

rust-vmm/seccompilerThis is a public archive. The code now lives in the mono-repo: https://github.com/rust-vmm/rust-vmm/
Rust★ 127↓ 1.9M/moSep 10, 2026
JavaScript · TypeScript★ 133↓ 660.9K/moSep 18, 2026

holtwick/bx-macSandbox any macOS app — only your project directory stays accessible
TypeScript★ 102↓ 601/moSep 10, 2026