All 225 Dependencies

Every package CubeSandbox depends on, ranked by repo health score.

CubeSandbox is an open-source sandbox service purpose-built to give AI agents secure, disposable compute at scale. Each sandbox boots as a dedicated MicroVM with its own Linux kernel on top of KVM, isolating agent-executed code at the hardware level rather than sharing a host kernel the way container-based sandboxes do. Cold starts average under 60ms and steady-state overhead per sandbox is under 5MB, so a single node can host thousands of concurrent, hardware-isolated environments — a density and speed profile aimed squarely at agent workloads that spin up and tear down sandboxes constantly.

Under the hood, CubeSandbox splits into a stateless control plane and a node-local data plane. CubeAPI (Rust/Axum) and CubeMaster (Go) handle scheduling and API traffic with all coordination state held in Redis, so either service scales out horizontally with no local state to reconcile. On each compute node, Cubelet drives the sandbox lifecycle through CubeShim, a containerd Shim v2 implementation that hands off to CubeHypervisor — a lightweight VMM built on RustVMM. Snapshotting and cloning go through CubeCoW, a Rust storage engine that uses the kernel's FICLONE ioctl for O(1), zero-copy snapshots, enabling hundred-millisecond-granularity checkpoint/rollback/fork of running sandboxes.

The project ships an E2B-compatible REST API, so existing E2B SDK code (Python, JS) can point at a self-hosted CubeSandbox cluster by changing only the API URL and key — no client-side rewrite. Security is handled at the network layer: all sandbox egress routes through CubeEgress, an OpenResty-based L7 proxy enforcing per-domain/path/method allowlists with automatic credential injection, so secrets used to call external APIs never enter the sandbox itself. CubeVS adds eBPF-based inter-sandbox isolation and SNAT egress at the kernel level.

Beyond the core runtime, CubeSandbox includes auto-pause/auto-resume for idle sandboxes, a pluggable Volume framework for custom storage backends, a WebUI/CLI for operators, and deployment tooling for single-node, Terraform-based Tencent Cloud clusters, and Kubernetes. Client SDKs are published for Python (PyPI), Go, and Node, and the project is maintained by Tencent Cloud with an active, CNCF-landscape-listed open-source community.

17 capng 0.2.2 23 capctl 0.2.0 23 netlink-packet-utils 0.4.1 outdated 23 scan_fmt 0.2.3 23 slog-scope 4.1.2 24 slog-async 2.7.0 28 slog-json 2.4.0 29 epoll 4.3.1 29 slog-stdlog 4.0.0 30 mdurl ==0.1.2 30 slog-term 2.9.0 31 crc32c 0.6.3 33 dirs-rs 4.0.0 outdated 33 libseccomp 0.3.0 outdated 33 libseccomp 0.2 outdated 34 scopeguard 1.0.0 34 tailwindcss-animate ^1.0.7 34 tokio-vsock 0.5.0 outdated 35 caps 0.5.0 36 path-absolutize 1.2.0 outdated 36 syslog 6.1 outdated 37 bincode 1.3.3 outdated 39 h11 ==0.16.0 39 vmm-sys-util 0.12.1 outdated 40 byteorder 1.4.3 40 once_cell 1.16.0 40 signal-hook 0.3.14 outdated 41 Termion 4.0.3 41 dirs-next 2.0.0 41 libfuzzer-sys 0.4.5 41 vitepress-plugin-mermaid ^2.0.17 42 async-recursion 0.3.2 outdated 42 clsx ^2.1.1 42 protobuf 2.28.0 outdated 43 go-metrics v0.0.0-20200313005456-10cdbea86bc0 43 prometheus 0.14.0 44 cmdk ^1.0.0 45 ArcSwap 1.1 45 dockerfile-parse ==2.0.1 45 six ==1.17.0 45 uuid v1.6.0 46 bracex ==2.6 outdated 46 jsoniter v1.1.12 46 jsonschema v0.13.0 outdated 46 nix 0.29.0 outdated 47 go-cache v2.1.0+incompatible 47 ipnetwork 0.17.0 outdated 47 netlink-sys 0.7.0 outdated 47 rlimit 0.5.3 outdated 47 slog 2.5.2 48 backoff v7.0.0 48 errors v0.9.1 49 gdbstub 0.6.3 outdated 49 gdbstub 0.2.4 outdated 49 go-multierror v1.1.1 49 procfs 0.12.0 outdated 51 fsnotify v1.9.0 outdated 51 remain 0.2.5 51 websocket v1.5.4-0.20250319132907-e064f32e3674 52 DashMap 5 outdated 52 Tower 0.4 outdated 52 redigo v1.9.3 53 httpcore ==1.0.9 53 seccompiler 0.3.0 outdated 54 Dockertest v3.12.0 54 Validator 0.16 outdated 54 vm-memory 0.14.1 outdated 55 go-yaml v1.19.2 55 netlink-packet-core 0.7.0 outdated 55 runtime-spec v1.3.0 56 HTTPX ==0.28.1 56 cfg-if 0.1.0 outdated 56 decimal v1.4.0 56 governor 0.6 outdated 56 i18next-browser-languageDetector ^8.2.1 57 go-systemd v22.6.0 outdated 57 rich ==14.3.3 outdated 58 tracing 0.1 58 tracing 0.2 outdated 58 tracing 0.3 outdated 59 getrandom 0.2.7 outdated 60 dotenvy 0.15 61 sqlite v1.11.0 63 Certifi ==2026.2.25 outdated 63 inotify 0.9.2 outdated 63 python-dotenv 63 vfio-bindings 0.3.1 outdated 64 lazy_static 1.5.0 65 Wcmatch ==10.1 outdated 65 jwt v5.2.2 outdated 65 ssh2-rs 0.9.3 65 tracing-opentelemetry 0.13.0 outdated 65 tsup ^8.2.4 66 base64 0.22.1 outdated 67 anyhow 1 67 io-uring 0.5.8 outdated 67 oci-spec =0.6.8 outdated 67 postcard 1.0 67 serial_test 0.5.1 outdated 68 kvm-bindings =0.8.1 outdated 68 kvm-bindings 0.17.0 outdated 68 tempfile 3.1.0 69 http-body 0.1 outdated 69 image-spec v1.1.1 70 virtio-bindings 0.1.0 outdated 70 virtio-bindings 0.11.0 outdated 71 log 0.4.11 72 Fontsource Inter ^5.2.8 72 Fontsource Inter ^5.2.8 72 serde_json 1 73 Chrono 0.4 73 netlink v1.3.1 73 python-dateutil ==2.9.0.post0 74 Radix UI ^1.1.2 74 Radix UI ^2.1.2 outdated 74 Radix UI ^2.1.0 outdated 74 Radix UI ^1.2.0 74 Radix UI ^1.1.0 74 Radix UI ^1.1.0 74 Radix UI ^1.1.1 74 Radix UI ^1.2.2 74 Radix UI ^1.1.3 74 go-toml v1.9.5 74 go-toml v2.2.4 75 lipgloss v1.1.0 75 testify v1.11.1 outdated 75 toml 0.5.8 outdated 76 Bubbles v1.0.0 76 logr v1.4.3 outdated 76 mini-swe-agent >=2.2.8 76 phf 0.11 outdated 76 serde 1 76 serde 1.0.131 77 Gin v1.11.0 outdated 77 react-i18next ^17.0.4 77 regex 1.10.5 77 ttrpc =0.5.8 outdated 78 Zustand ^5.0.0 78 async-trait 0.1 78 config 0.13 outdated 78 openapi-typescript ^7.13.0 79 @e2b/code-interpreter ==2.4.1 outdated 79 MSW (Mock Service Worker) ^2.13.5 79 bitflags 2.6.0 79 containerd-shim =0.9.0 outdated 79 containerd-shim =0.9.0 outdated 79 thiserror 1 outdated 80 @dicebear/core ^9.4.2 outdated 80 @dicebear/core ^9.4.2 outdated 80 attrs ==25.4.0 outdated 80 hyper-util 0.1 80 idna ==3.11 outdated 80 miniredis v2.35.0 outdated 80 netlink-packet-route 0.19.0 outdated 80 sysinfo 0.23.0 outdated 80 typing_extensions ==4.15.0 outdated 81 Requests >=2 81 rtnetlink 0.14.0 outdated 81 uuid 1 82 Bubble Tea v1.3.10 82 Go-MySQL-Driver v1.9.3 outdated 82 class-variance-authority ^0.7.0 82 i18next ^26.0.6 82 reqwest 0.12 outdated 82 tower-http 0.5 outdated 82 vhost 0.11.0 outdated 82 vhost 0.15.0 outdated 83 Logrus v1.9.3 outdated 83 goose v3.27.1 outdated 83 markdown-it-py ==4.0.0 outdated 83 mypy >=1.0 84 procfs v0.19.2 outdated 85 env_logger 0.10.2 outdated 85 packaging ==26.0 outdated 85 pgx v4 v5.10.0 86 AnyIO ==4.12.1 outdated 86 serde_with 2.0.1 outdated 86 tailwind-merge ^2.5.4 outdated 87 Autoprefixer ^10.4.20 87 utoipa 5.4.0 outdated 89 OpenAI Agents SDK 89 ebpf v0.17.3 outdated 89 time =0.3.36 outdated 89 zerocopy 0.6.1 outdated 90 Clap 4 90 Clap 4.5.50 90 E2B ==2.15.2 outdated 90 Ruff >=0.4 90 Tailwind CSS ^3.4.14 outdated 90 futures 0.3 91 Pygments ==2.20.0 outdated 91 go-containerregistry v0.21.6 outdated 91 go-redis v9.7.0 outdated 91 playwright-python >=1.40.0 91 prettier ^3.9.5 92 LiteLLM >=1.83.0 92 Mermaid ^11.13.0 outdated 92 OpenTelemetry Rust 0.14.0 outdated 92 TanStack Query ^5.59.0 92 axum 0.7 outdated 92 axum 0.9 outdated 92 client_golang v1.23.2 outdated 92 lucide-react ^0.456.0 outdated 92 postcss ^8.4.47 92 undici ^6.19.8 outdated 92 urfave/cli v1.22.15 outdated 92 urfave/cli v2.27.7 93 @vitejs/plugin-react ^4.3.3 outdated 93 Pydantic 93 Vitest ^2.0.5 outdated 93 hyper 1 93 libc =0.2.158 outdated 94 Vite ^6.4.2 outdated 95 React Router ^6.27.0 outdated 95 Tokio 1 95 aiohttp >=3.9 95 containerd v1.7.32 outdated 95 containerd v1.10.0 95 containerd v2.2.2 96 Vue ^3.5.31 96 pytest >=7.0 97 TypeScript ^5.5.4 outdated 98 Protocol Buffers ==7.34.0 outdated 98 React ^18.3.1 outdated 98 React DOM ^18.3.1 outdated

All 225 Dependencies

Join founders buildingwith open source