|
safenpm — Sandboxed npm installs
Drop-in npm install replacement that sandboxes postinstall scripts, catches supply-chain attacks, and shares alerts across a decentralized threat intelligenc...
|
86 % |
|
devly — give your agents sudo
Spin up full Linux VMs from a simple REST API. Real code, full root, public ports. ~450ms cold boot. Built for AI agents, CI pipelines, and code execution sa...
|
84 % |
|
DeepSeek TUI — Terminal-native coding agent
|
84 % |
|
Simpatico -
|
83 % |
|
Simpatico -
|
83 % |
|
Sandboxes on any Linux host - nativesandbox
Run untrusted code in isolated sandboxes without a hypervisor. Containers through Podman or Docker — no KVM, no nested virtualisation, no daemon of its own.
|
83 % |
|
runtime.js – JavaScript library operating system for the cloud
JavaScript library operating system for the cloud
|
82 % |
|
Give MCP servers a sandbox, not your filesystem.
Warden runs MCP servers in a restricted sandbox. Servers only get the files, hosts, and env vars you explicitly grant. Open-source, fail-closed, audited.
|
82 % |
|
jerboa — unikernel engine
Fast, lightweight, secure. A unikernel engine for building, running, and orchestrating VM-based application images.
|
82 % |
|
kern - rootless container runtime and sandbox
kern: rootless container runtime and sandbox with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.
|
82 % |
|
NumaVM — The fastest way to create and share apps
Cloud dev environments with real Linux VMs, built-in AI agents, and a live HTTPS URL for every project. Free to start.
|
82 % |
|
Stedfast - Self-Hosted AI Interface
Self-hosted AI interface built for power users. Zero npm dependencies. One Docker command.
|
82 % |
|
refuse — open-source shim that refuses vulnerable packages
Open-source shim for npm, pip, cargo, gem, go and 13 other package managers. Refuses vulnerable installs whether you ran them, your agent did, or CI did. 362...
|
82 % |
|
ShadowCanopy — Know exactly what your AI installs
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default across npm, PyPI, crates, Go, RubyGems and more — and only le...
|
82 % |
|
crucible: the safe docker run for code you don't trust
crucible runs untrusted code in hardware-isolated Firecracker microVMs that boot in milliseconds. One Go binary, snapshot & fork as primitives, on your own h...
|
82 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
82 % |
|
Vanitty: Fast Open-Source Terminal for Windows, macOS & Linux
Free, open-source terminal emulator for Windows, macOS and Linux, and a native alternative to Hyper. Built with Rust and Tauri, with tabs, splits, themes and...
|
82 % |
|
ZeroVM — Run real Linux in the browser. x86 → WebAssembly.
ZeroVM is a secure x86 virtualization sandbox that boots unmodified Linux binaries client-side via WebAssembly. No plugins, no install, no backend VMs — untr...
|
81 % |
|
Capsem -- The fastest way to ship with AI securely.
The fastest way to ship with AI securely.
|
81 % |
|
Finestra — a window into your servers
A window into your servers. A desktop environment that runs in a browser and drives a headless Linux server — terminal, files, system manager, and real Linux...
|
81 % |
Detected social media networks