All 224 Dependencies

Every package CubeSandbox depends on, ranked by repo health score.

CubeSandbox is an open-source sandbox service purpose-built to give AI agents secure, disposable compute at scale. Each sandbox boots as a dedicated MicroVM with its own Linux kernel on top of KVM, isolating agent-executed code at the hardware level rather than sharing a host kernel the way container-based sandboxes do. Cold starts average under 60ms and steady-state overhead per sandbox is under 5MB, so a single node can host thousands of concurrent, hardware-isolated environments — a density and speed profile aimed squarely at agent workloads that spin up and tear down sandboxes constantly.

Under the hood, CubeSandbox splits into a stateless control plane and a node-local data plane. CubeAPI (Rust/Axum) and CubeMaster (Go) handle scheduling and API traffic with all coordination state held in Redis, so either service scales out horizontally with no local state to reconcile. On each compute node, Cubelet drives the sandbox lifecycle through CubeShim, a containerd Shim v2 implementation that hands off to CubeHypervisor — a lightweight VMM built on RustVMM. Snapshotting and cloning go through CubeCoW, a Rust storage engine that uses the kernel's FICLONE ioctl for O(1), zero-copy snapshots, enabling hundred-millisecond-granularity checkpoint/rollback/fork of running sandboxes.

The project ships an E2B-compatible REST API, so existing E2B SDK code (Python, JS) can point at a self-hosted CubeSandbox cluster by changing only the API URL and key — no client-side rewrite. Security is handled at the network layer: all sandbox egress routes through CubeEgress, an OpenResty-based L7 proxy enforcing per-domain/path/method allowlists with automatic credential injection, so secrets used to call external APIs never enter the sandbox itself. CubeVS adds eBPF-based inter-sandbox isolation and SNAT egress at the kernel level.

Beyond the core runtime, CubeSandbox includes auto-pause/auto-resume for idle sandboxes, a pluggable Volume framework for custom storage backends, a WebUI/CLI for operators, and deployment tooling for single-node, Terraform-based Tencent Cloud clusters, and Kubernetes. Client SDKs are published for Python (PyPI), Go, and Node, and the project is maintained by Tencent Cloud with an active, CNCF-landscape-listed open-source community.

17 capng 0.2.2 22 netlink-packet-utils 0.4.1 outdated 23 capctl 0.2.0 23 scan_fmt 0.2.3 23 slog-scope 4.1.2 24 slog-async 2.7.0 28 slog-json 2.4.0 29 epoll 4.3.1 29 slog-stdlog 4.0.0 30 slog-term 2.9.0 31 crc32c 0.6.3 33 dirs-rs 4.0.0 outdated 33 mdurl ==0.1.2 34 libseccomp 0.3.0 outdated 34 libseccomp 0.2 outdated 34 scopeguard 1.0.0 34 tailwindcss-animate ^1.0.7 35 caps 0.5.0 36 syslog 6.1 outdated 37 bincode 1.3.3 outdated 37 path-absolutize 1.2.0 outdated 39 h11 ==0.16.0 39 tokio-vsock 0.5.0 outdated 39 vitepress-plugin-mermaid ^2.0.17 39 vmm-sys-util 0.12.1 outdated 40 byteorder 1.4.3 40 once_cell 1.16.0 41 dirs-next 2.0.0 41 signal-hook 0.3.14 outdated 41 Termion 4.0.3 42 clsx ^2.1.1 42 libfuzzer-sys 0.4.5 42 protobuf 2.28.0 outdated 43 async-recursion 0.3.2 outdated 43 go-metrics v0.0.0-20200313005456-10cdbea86bc0 43 prometheus 0.14.0 44 cmdk ^1.0.0 44 netlink-sys 0.7.0 outdated 45 dockerfile-parse ==2.0.1 45 uuid v1.6.0 45 six ==1.17.0 46 cfg-if 0.1.0 outdated 46 jsonschema v0.13.0 outdated 46 jsoniter v1.1.12 46 lazy_static 1.5.0 46 nix 0.29.0 outdated 46 rlimit 0.5.3 outdated 47 bracex ==2.6 outdated 47 go-cache v2.1.0+incompatible 48 ipnetwork 0.17.0 outdated 48 slog 2.5.2 49 ArcSwap 1.1 49 errors v0.9.1 50 gdbstub 0.6.3 outdated 50 gdbstub 0.2.4 outdated 50 go-multierror v1.1.1 51 websocket v1.5.4-0.20250319132907-e064f32e3674 52 fsnotify v1.9.0 outdated 52 redigo v1.9.3 53 DashMap 5 outdated 53 httpcore ==1.0.9 53 netlink-packet-core 0.7.0 outdated 53 python-dateutil ==2.9.0.post0 54 procfs 0.12.0 outdated 54 remain 0.2.5 55 runtime-spec v1.3.0 55 HTTPX ==0.28.1 55 seccompiler 0.3.0 outdated 55 Tower 0.4 outdated 55 tracing-opentelemetry 0.13.0 outdated 56 go-yaml v1.19.2 56 Dockertest v3.12.0 57 backoff v7.0.0 57 i18next-browser-languageDetector ^8.2.1 57 Validator 0.16 outdated 57 vfio-bindings 0.3.1 outdated 58 go-systemd v22.6.0 outdated 58 vm-memory 0.14.1 outdated 59 governor 0.6 outdated 59 tracing 0.1 59 tracing 0.2 outdated 59 tracing 0.3 outdated 60 jwt v5.2.2 outdated 60 decimal v1.4.0 60 tsup ^8.2.4 62 dotenvy 0.15 62 getrandom 0.2.7 outdated 62 image-spec v1.1.1 62 rich ==14.3.3 outdated 63 sqlite v1.11.0 64 ssh2-rs 0.9.3 66 Certifi ==2026.2.25 outdated 66 inotify 0.9.2 outdated 66 markdown-it-py ==4.0.0 outdated 66 openapi-typescript ^7.13.0 66 python-dotenv 67 postcard 1.0 68 base64 0.22.1 outdated 69 bitflags 2.6.0 69 serial_test 0.5.1 outdated 70 config 0.13 outdated 70 http-body 0.1 outdated 70 virtio-bindings 0.1.0 outdated 70 virtio-bindings 0.11.0 outdated 70 Wcmatch ==10.1 outdated 71 Fontsource Inter ^5.2.8 71 Fontsource Inter ^5.2.8 72 Gin v1.11.0 outdated 72 kvm-bindings =0.8.1 outdated 72 kvm-bindings 0.17.0 outdated 73 MSW (Mock Service Worker) ^2.13.5 73 oci-spec =0.6.8 outdated 74 logr v1.4.3 outdated 74 io-uring 0.5.8 outdated 75 anyhow 1 75 testify v1.11.1 outdated 75 tempfile 3.1.0 75 ttrpc =0.5.8 outdated 76 Radix UI ^1.1.2 76 Radix UI ^2.1.2 outdated 76 Radix UI ^2.1.0 outdated 76 Radix UI ^1.2.0 76 Radix UI ^1.1.0 76 Radix UI ^1.1.0 76 Radix UI ^1.1.1 76 Radix UI ^1.2.2 76 Radix UI ^1.1.3 76 hyper-util 0.1 76 phf 0.11 outdated 76 react-i18next ^17.0.4 76 serde_json 1 76 thiserror 1 outdated 76 toml 0.5.8 outdated 77 async-trait 0.1 77 Chrono 0.4 77 miniredis v2.35.0 outdated 77 log 0.4.11 77 serde 1 77 serde 1.0.131 78 env_logger 0.10.2 outdated 78 lipgloss v1.1.0 78 rtnetlink 0.14.0 outdated 78 vhost 0.11.0 outdated 78 vhost 0.15.0 outdated 79 containerd-shim =0.9.0 outdated 79 containerd-shim =0.9.0 outdated 79 pgx v4 v5.10.0 79 sysinfo 0.23.0 outdated 80 @dicebear/core ^9.4.2 outdated 80 @dicebear/core ^9.4.2 outdated 80 Bubbles v1.0.0 80 idna ==3.11 outdated 80 netlink-packet-route 0.19.0 outdated 80 Zustand ^5.0.0 81 Bubble Tea v1.3.10 81 netlink v1.3.1 81 regex 1.10.5 82 go-toml v1.9.5 82 go-toml v2.2.4 83 attrs ==25.4.0 outdated 83 class-variance-authority ^0.7.0 83 @e2b/code-interpreter ==2.4.1 outdated 83 mini-swe-agent >=2.2.8 83 mypy >=1.0 83 Requests >=2 83 reqwest 0.12 outdated 84 goose v3.27.1 outdated 84 tower-http 0.5 outdated 84 uuid 1 85 AnyIO ==4.12.1 outdated 85 Go-MySQL-Driver v1.9.3 outdated 85 Logrus v1.9.3 outdated 85 packaging ==26.0 outdated 85 utoipa 5.4.0 86 Autoprefixer ^10.4.20 86 procfs v0.19.2 outdated 86 serde_with 2.0.1 outdated 87 i18next ^26.0.6 88 E2B ==2.15.2 outdated 88 OpenAI Agents SDK 88 tailwind-merge ^2.5.4 outdated 88 typing_extensions ==4.15.0 outdated 89 zerocopy 0.6.1 outdated 90 Clap 4 90 Clap 4.5.50 90 ebpf v0.17.3 outdated 90 prettier ^3.9.5 90 Ruff >=0.4 90 Tailwind CSS ^3.4.14 outdated 91 axum 0.7 outdated 91 axum 0.9 outdated 91 go-containerregistry v0.21.6 outdated 91 client_golang v1.23.2 outdated 91 go-redis v9.7.0 outdated 91 lucide-react ^0.456.0 outdated 91 OpenTelemetry Rust 0.14.0 outdated 91 time =0.3.36 outdated 92 TanStack Query ^5.59.0 92 @vitejs/plugin-react ^4.3.3 outdated 92 futures 0.3 92 urfave/cli v1.22.15 outdated 92 urfave/cli v2.27.7 92 LiteLLM >=1.83.0 92 Mermaid ^11.13.0 92 playwright-python >=1.40.0 92 postcss ^8.4.47 92 Pydantic 92 Vitest ^2.0.5 outdated 93 hyper 1 93 Tokio 1 93 undici ^6.19.8 outdated 93 Vite ^6.4.2 outdated 94 libc =0.2.158 outdated 94 React Router ^6.27.0 outdated 95 aiohttp >=3.9 95 containerd v1.7.32 outdated 95 containerd v1.10.0 95 containerd v2.2.2 96 pytest >=7.0 96 TypeScript ^5.5.4 outdated 96 Vue ^3.5.31 97 React ^18.3.1 outdated 97 React DOM ^18.3.1 outdated 98 Protocol Buffers ==7.34.0 outdated

All 224 Dependencies

Join founders buildingwith open source

Search