npm
NVIDIA/NemoClaw
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
Apache-2.0Sep 16, 2026 · metrics 2.10.0
All tags
Catalogue tag
#sandboxing
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
19 records
Go
aalpar/wile
Pure Go R7RS Scheme — embeddable interpreter with hygienic macros, first-class continuations, and sandboxing
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · npm
ruvnet/metaharness
🛠️ The meta-harness for AI agents — scaffold your own focused, branded agent harness with its own npx CLI, MCP server, memory, learning loop, and witness-signed releases. Works with Claude Code, Codex, pi.dev, Hermes, OpenClaw, and RVM (hardware-isolated sandbox).
MITSep 13, 2026 · metrics 2.10.0
PyPI · Go · crates.io
multikernel/sandlock
The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
souk4711/hakoniwa
Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Custom licenseSep 28, 2026 · metrics 2.10.0
Go
TomTonic/extract-sbom
Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go · npm
folsomintel/fuse
Lightweight microVMs for running anything.
MITSep 5, 2026 · metrics 2.10.0
crates.io
sunfishcode/cap-std
Capability-oriented version of the Rust standard library
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
crispuscrew/zinc
Security-focused sandboxing core running apps via Podman containers or qemu VMs, each walled off from the rest of the desktop. Compositor-agnostic and installs cleanly on any existing system.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
val-town/deno-http-worker
Securely spawn Deno workers from Node.js
No licenseOct 3, 2026 · metrics 2.10.0
PyPI · crates.io
bmsuisse/pydeno
Run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.
Custom licenseOct 10, 2026 · metrics 2.10.0
crates.io · NuGet · PyPI
daveepope/arena
A cross platform sandboxing framework with built in profiling workflows.
MITSep 16, 2026 · metrics 2.10.0
crates.io
landlock-lsm/rust-landlock
A Rust library for the Linux Landlock sandboxing feature
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
metarhia/Example
Metarhia application example for Node.js 🟢
MITSep 13, 2026 · metrics 2.10.0
—
loft-sh/loft
Namespace & Virtual Cluster Manager for Kubernetes - Lightweight Virtual Clusters, Self-Service Provisioning for Engineers and 70% Cost Savings with Sleep Mode
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
declaw-ai/declaw-js
TypeScript SDK for Declaw — security-first sandboxing for AI agents
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
alwitt/rest-pty
Terminals as a service — drive PTY sessions over REST and MCP.
MITSep 13, 2026 · metrics 2.10.0
crates.io
santhreal/procjail
Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout
MITSep 15, 2026 · metrics 2.10.0
Go
sporevm/sporevm
Forkable aarch64 Linux microVMs with fast capture, resume, and local fan-out
MITSep 8, 2026 · metrics 2.10.0