| greentic-mcp-exec-dev cargo | 1.2.37708889650 | 9 vulnerabilities 9 | Greentic executor for running wasix:mcp-compatible WebAssembly components with policy-driven verification and sandboxing. | 1.8K | 4h ago |
| dekopon-http-host cargo | 0.35.0 | clean | Statically linked bounded HTTP primitive for Dekopon broker hosts | 1.7K | 1d ago |
| dekopon-broker-host cargo | 0.35.0 | clean | Broker-owned bounded asynchronous WebAssembly provider host for Dekopon | 1.6K | 1d ago |
| outl-exec cargo | | not built | Code-block execution engine for outl: trait Runtime + sandbox + idempotent result subblock. | 1.6K | 2d ago |
| dekopon-storage-host cargo | 0.35.0 | clean | Broker-owned namespace-bound quota and direct-write engine for Dekopon providers | 1.5K | 1d ago |
| monty-runtime cargo | 1.1.0 | 1 vulnerability 1 | A secure, snapshotable Python sandbox written in Rust. | 1.3K | 2d ago |
| everruns-integrations-sprites cargo | 0.42.0 | clean | Sprites cloud sandbox integration for Everruns agents | 1.2K | 1d ago |
| everruns-integrations-deno cargo | 0.42.0 | clean | Deno Sandbox integration for Everruns agents | 1.2K | 1d ago |
| everruns-integrations-e2b cargo | 0.42.0 | clean | E2B cloud sandbox integration for Everruns | 1.2K | 1d ago |
| everruns-integrations-docker cargo | 0.42.0 | clean | Docker container integration for Everruns agents | 1.1K | 1d ago |
| portaki-cli cargo | 10.0.0 | clean | Portaki module CLI (portaki) — init, build, test, hosted sandbox, OCI publish and registry announcement | 1.1K | 7h ago |
| dekopon-shell cargo | 0.35.0 | clean | Sandboxed bash-flavored script interpreter whose commands dispatch to Dekopon capabilities | 936 | 1d ago |
| dekopon-agent cargo | 0.35.0 | clean | Bounded model prompt loop and session capability dispatch for Dekopon agents | 771 | 1d ago |
| isb-core cargo | 2.0.0 | clean | isb's foundation: the incus client, the sandbox spec and planner, compose projects, stacks, orgs, the registry and ingress. Use the `isb` crate. | 700 | 13h ago |
| everruns-integrations-bashkit cargo | 0.42.0 | clean | Sandboxed Bashkit shell capability integration for Everruns agents | 667 | 1d ago |
| everruns-integrations-lua cargo | 0.42.0 | clean | Sandboxed Lua and code-mode capability integration for Everruns agents | 538 | 1d ago |
| aria-agent-core cargo | 1.4.1 | clean | Unified agent runtime: wraps the codex harness loop, injects recalled context (ContextStore contract), isolates tools in a sandbox. | 532 | 1d ago |
| arcbox-connect cargo | 0.9.0 | clean | Connect RPC surface for the ArcBox sandbox API (connectrpc + buffa) | 509 | 11h ago |
| gigacode cargo | | not built 0.5.1 did not build | Sandbox Agent CLI with OpenCode attach by default | 463 | 9h ago |
| microvms-core cargo | 0.11.0 | clean | The MicroVMs control-plane and in-VM client: every trap closure, the cost engine, the sizing model | 443 | 8h ago |
| isb-egress cargo | 2.0.0 | clean | isb's per-sandbox egress proxy: hostname allowlists and secrets that never enter the guest. Use the `isb` crate. | 430 | 13h ago |
| crush-vm cargo | 0.3.9 | clean | CVM1 binary bytecode assembler, disassembler, and sandboxed interpreter — standalone Crush runtime outside exosphere | 418 | 10h ago |
| octosense-app-contract cargo | 1.7.1 | clean | The OctoSense app contract: app manifests, the policy an app gets, package integrity and running a package | 394 | 50m ago |
| smolmachines cargo | 1.24.0 | clean | Embed smol machines microVMs directly in a Rust process | 380 | 1d ago |
| isb cargo | 2.0.0 | 5 vulnerabilities 5 | Declarative incus sandboxes: a library, a CLI and a compose-style YAML spec that talk to incusd over its unix socket | 319 | 12h ago |
| agent-guard-core cargo | 0.2.8 | clean | Core types, policy engine and audit for agent-guard | 315 | 1d ago |
| arcbox-computer cargo | | not built 0.9.0 did not build | Agent-computer domain layer for ArcBox: transport-free sandbox protocols | 301 | 9h ago |
| memcordon-windows-launch-core cargo | 0.5.7-rc.19 | clean | Typed, observer-free Windows loader launch contract shared by MemCordon and its loader lab | 291 | 1d ago |
| agent-guard-validators cargo | 0.2.8 | clean | Bash and path validators for agent-guard | 237 | 1d ago |
| act-runtime cargo | 0.14.5 | clean | Embeddable wasmtime host for ACT (Agent Component Tools) components | 210 | 8h ago |