| minip2p-tcp cargo | 0.7.4 | clean | Sans-I/O libp2p TCP transport over a pluggable byte-stream provider | 488 | 23h ago |
| warble cargo | 0.17.0 | clean | Warble front-end compiler: parse/resolve/validate a behavior profile into language-neutral IR (sans-IO). | 466 | 21h ago |
| gigacode cargo | | not built 0.5.1 did not build | Sandbox Agent CLI with OpenCode attach by default | 463 | 11h ago |
| tank-scylladb cargo | 0.44.0 | clean | ScyllaDB and Cassandra driver implementation for Tank: the Rust data layer | 444 | 1d ago |
| microvms-core cargo | 0.11.0 | clean | The MicroVMs control-plane and in-VM client: every trap closure, the cost engine, the sizing model | 443 | 10h ago |
| pacta-memory cargo | 0.3.3 | clean | In-memory Pacta Registry backend with real lease and lapse semantics. | 437 | 1d ago |
| isb-egress cargo | 2.0.0 | clean | isb's per-sandbox egress proxy: hostname allowlists and secrets that never enter the guest. Use the `isb` crate. | 430 | 15h ago |
| minip2p-relay-server cargo | 0.7.4 | clean | Deterministic sans-I/O Circuit Relay v2 server for minip2p | 426 | 23h ago |
| crush-vm cargo | 0.3.9 | clean | CVM1 binary bytecode assembler, disassembler, and sandboxed interpreter — standalone Crush runtime outside exosphere | 418 | 12h ago |
| minip2p-smoltcp cargo | 0.7.4 | clean | Shared smoltcp stack handle for minip2p embedded adapters | 406 | 1d ago |
| octosense-app-contract cargo | 1.8.0 | clean | The OctoSense app contract: app manifests, the policy an app gets, package integrity and running a package | 394 | 1h ago |
| smolmachines cargo | 1.24.0 | clean | Embed smol machines microVMs directly in a Rust process | 380 | 1d ago |
| isb cargo | 2.0.0 | 5 vulnerabilities 5 | Declarative incus sandboxes: a library, a CLI and a compose-style YAML spec that talk to incusd over its unix socket | 319 | 14h ago |
| agent-guard-core cargo | 0.2.8 | clean | Core types, policy engine and audit for agent-guard | 315 | 1d ago |
| arcbox-computer cargo | | not built 0.9.0 did not build | Agent-computer domain layer for ArcBox: transport-free sandbox protocols | 301 | 11h ago |
| memcordon-windows-launch-core cargo | 0.5.7-rc.19 | clean | Typed, observer-free Windows loader launch contract shared by MemCordon and its loader lab | 291 | 1d ago |
| spawnllm-core cargo | 0.17.1 | clean | Sans-io core logic shared by spawnllm's language bindings: backend planning, output resolution, and structured-output helpers. | 249 | 9h ago |
| agent-guard-validators cargo | 0.2.8 | clean | Bash and path validators for agent-guard | 237 | 1d ago |
| rustuya-core cargo | 0.4.3 | clean | Sans-I/O no_std core for the Tuya local protocol (protocol, crypto, state machines) | 220 | 2d ago |
| act-runtime cargo | 0.14.5 | clean | Embeddable wasmtime host for ACT (Agent Component Tools) components | 210 | 10h ago |
| xpa-helix-core cargo | 0.1.11 | clean | 运行时无关的确定性业务内核与 sans-IO 执行壳 | 210 | 1d ago |
| agent-guard-sdk cargo | 0.2.8 | clean | High-level SDK for agent-guard policy enforcement | 205 | 1d ago |
| sigorta-contract cargo | 0.1.6 | clean | A sans-I/O, single-instance circuit-breaking core. | 192 | 2d ago |
| rustuya-tokio cargo | 0.4.3 | clean | Tokio driver for the sans-I/O rustuya-core Tuya protocol FSM | 188 | 2d ago |
| sigorta cargo | 0.1.6 | clean | Curated entrypoint for Sigorta: a thin, sans-I/O circuit-breaking core you compose. | 154 | 2d ago |
| everruns-capabilities cargo | 0.44.0 | clean | Hosted capabilities and sandbox orchestration for Everruns | 143 | 6h ago |
| agent-guard-broker cargo | 0.2.8 | clean | Broker-owned Git push: resolve, authorize and execute the exact outbound transaction | 123 | 1d ago |
| workpen cargo | 0.7.5 | clean | Workpen dest-deny and a per-child process jail (Landlock, Seatbelt, Windows). | 103 | 1d ago |
| zenoh-web-rtc-sctp cargo | 0.21.0-zw.3 | clean | Fork of rtc-sctp 0.21.0 with fixes for zenoh-web (see PATCHES.md) | 92 | 5h ago |
| zenoh-web-rtc-datachannel cargo | 0.21.0-zw.3 | clean | Fork of rtc-datachannel 0.21.0 with fixes for zenoh-web (see PATCHES.md) | 89 | 3h ago |
