All 224 Dependencies

Every package CubeSandbox depends on, ranked by repo health score.

CubeSandbox is an open-source sandbox service purpose-built to give AI agents secure, disposable compute at scale. Each sandbox boots as a dedicated MicroVM with its own Linux kernel on top of KVM, isolating agent-executed code at the hardware level rather than sharing a host kernel the way container-based sandboxes do. Cold starts average under 60ms and steady-state overhead per sandbox is under 5MB, so a single node can host thousands of concurrent, hardware-isolated environments — a density and speed profile aimed squarely at agent workloads that spin up and tear down sandboxes constantly.

Under the hood, CubeSandbox splits into a stateless control plane and a node-local data plane. CubeAPI (Rust/Axum) and CubeMaster (Go) handle scheduling and API traffic with all coordination state held in Redis, so either service scales out horizontally with no local state to reconcile. On each compute node, Cubelet drives the sandbox lifecycle through CubeShim, a containerd Shim v2 implementation that hands off to CubeHypervisor — a lightweight VMM built on RustVMM. Snapshotting and cloning go through CubeCoW, a Rust storage engine that uses the kernel's FICLONE ioctl for O(1), zero-copy snapshots, enabling hundred-millisecond-granularity checkpoint/rollback/fork of running sandboxes.

The project ships an E2B-compatible REST API, so existing E2B SDK code (Python, JS) can point at a self-hosted CubeSandbox cluster by changing only the API URL and key — no client-side rewrite. Security is handled at the network layer: all sandbox egress routes through CubeEgress, an OpenResty-based L7 proxy enforcing per-domain/path/method allowlists with automatic credential injection, so secrets used to call external APIs never enter the sandbox itself. CubeVS adds eBPF-based inter-sandbox isolation and SNAT egress at the kernel level.

Beyond the core runtime, CubeSandbox includes auto-pause/auto-resume for idle sandboxes, a pluggable Volume framework for custom storage backends, a WebUI/CLI for operators, and deployment tooling for single-node, Terraform-based Tencent Cloud clusters, and Kubernetes. Client SDKs are published for Python (PyPI), Go, and Node, and the project is maintained by Tencent Cloud with an active, CNCF-landscape-listed open-source community.

17 capng 0.2.2 22 netlink-packet-utils 0.4.1 outdated 23 capctl 0.2.0 23 scan_fmt 0.2.3 23 slog-scope 4.1.2 24 slog-async 2.7.0 28 slog-json 2.4.0 29 epoll 4.3.1 29 slog-stdlog 4.0.0 30 slog-term 2.9.0 31 crc32c 0.6.3 32 mdurl ==0.1.2 33 dirs-rs 4.0.0 outdated 33 libseccomp 0.3.0 outdated 33 libseccomp 0.2 outdated 34 scopeguard 1.0.0 34 tailwindcss-animate ^1.0.7 35 caps 0.5.0 36 syslog 6.1 outdated 37 bincode 1.3.3 outdated 37 path-absolutize 1.2.0 outdated 39 h11 ==0.16.0 39 tokio-vsock 0.5.0 outdated 39 vitepress-plugin-mermaid ^2.0.17 39 vmm-sys-util 0.12.1 outdated 40 byteorder 1.4.3 40 once_cell 1.16.0 41 dirs-next 2.0.0 41 signal-hook 0.3.14 outdated 41 Termion 4.0.3 42 clsx ^2.1.1 42 libfuzzer-sys 0.4.5 42 protobuf 2.28.0 outdated 43 async-recursion 0.3.2 outdated 43 go-metrics v0.0.0-20200313005456-10cdbea86bc0 43 prometheus 0.14.0 44 cmdk ^1.0.0 45 dockerfile-parse ==2.0.1 45 uuid v1.6.0 45 six ==1.17.0 46 ArcSwap 1.1 46 bracex ==2.6 outdated 46 cfg-if 0.1.0 outdated 46 jsonschema v0.13.0 outdated 46 jsoniter v1.1.12 46 lazy_static 1.5.0 46 nix 0.29.0 outdated 47 go-cache v2.1.0+incompatible 47 ipnetwork 0.17.0 outdated 47 netlink-sys 0.7.0 outdated 48 errors v0.9.1 48 rlimit 0.5.3 outdated 48 slog 2.5.2 49 go-multierror v1.1.1 50 gdbstub 0.6.3 outdated 50 gdbstub 0.2.4 outdated 51 websocket v1.5.4-0.20250319132907-e064f32e3674 52 fsnotify v1.9.0 outdated 52 redigo v1.9.3 52 procfs 0.12.0 outdated 53 DashMap 5 outdated 53 httpcore ==1.0.9 53 python-dateutil ==2.9.0.post0 54 backoff v7.0.0 54 HTTPX ==0.28.1 54 remain 0.2.5 54 seccompiler 0.3.0 outdated 54 vfio-bindings 0.3.1 outdated 55 runtime-spec v1.3.0 55 Dockertest v3.12.0 55 netlink-packet-core 0.7.0 outdated 55 Tower 0.4 outdated 55 tracing-opentelemetry 0.13.0 outdated 55 Validator 0.16 outdated 56 go-yaml v1.19.2 57 vm-memory 0.14.1 outdated 58 go-systemd v22.6.0 outdated 58 governor 0.6 outdated 58 i18next-browser-languageDetector ^8.2.1 58 tracing 0.1 58 tracing 0.2 outdated 58 tracing 0.3 outdated 59 decimal v1.4.0 60 getrandom 0.2.7 outdated 61 dotenvy 0.15 62 rich ==14.3.3 outdated 63 sqlite v1.11.0 65 Certifi ==2026.2.25 outdated 65 inotify 0.9.2 outdated 65 openapi-typescript ^7.13.0 65 postcard 1.0 65 python-dotenv 66 tsup ^8.2.4 67 base64 0.22.1 outdated 67 jwt v5.2.2 outdated 68 image-spec v1.1.1 68 kvm-bindings =0.8.1 outdated 68 kvm-bindings 0.17.0 outdated 68 serial_test 0.5.1 outdated 68 ssh2-rs 0.9.3 69 Wcmatch ==10.1 outdated 70 Fontsource Inter ^5.2.8 70 Fontsource Inter ^5.2.8 71 Gin v1.11.0 outdated 71 http-body 0.1 outdated 72 io-uring 0.5.8 outdated 72 virtio-bindings 0.1.0 outdated 72 virtio-bindings 0.11.0 outdated 73 testify v1.11.1 outdated 73 tempfile 3.1.0 74 anyhow 1 74 oci-spec =0.6.8 outdated 75 Radix UI ^1.1.2 75 Radix UI ^2.1.2 outdated 75 Radix UI ^2.1.0 outdated 75 Radix UI ^1.2.0 75 Radix UI ^1.1.0 75 Radix UI ^1.1.0 75 Radix UI ^1.1.1 75 Radix UI ^1.2.2 75 Radix UI ^1.1.3 75 hyper-util 0.1 75 serde_json 1 75 thiserror 1 outdated 75 ttrpc =0.5.8 outdated 76 async-trait 0.1 76 miniredis v2.35.0 outdated 76 logr v1.4.3 outdated 76 log 0.4.11 76 react-i18next ^17.0.4 76 serde 1 76 serde 1.0.131 76 toml 0.5.8 outdated 77 Bubbles v1.0.0 77 lipgloss v1.1.0 77 phf 0.11 outdated 77 vhost 0.11.0 outdated 77 vhost 0.15.0 outdated 78 bitflags 2.6.0 78 config 0.13 outdated 78 containerd-shim =0.9.0 outdated 78 containerd-shim =0.9.0 outdated 78 netlink v1.3.1 79 @dicebear/core ^9.4.2 outdated 79 @dicebear/core ^9.4.2 outdated 79 Chrono 0.4 79 go-toml v1.9.5 79 go-toml v2.2.4 79 mini-swe-agent >=2.2.8 79 MSW (Mock Service Worker) ^2.13.5 79 regex 1.10.5 79 sysinfo 0.23.0 outdated 79 Zustand ^5.0.0 80 Bubble Tea v1.3.10 80 utoipa 5.4.0 81 idna ==3.11 outdated 81 netlink-packet-route 0.19.0 outdated 81 rtnetlink 0.14.0 outdated 82 attrs ==25.4.0 outdated 82 Go-MySQL-Driver v1.9.3 outdated 82 markdown-it-py ==4.0.0 outdated 82 Requests >=2 82 tower-http 0.5 outdated 83 class-variance-authority ^0.7.0 83 @e2b/code-interpreter ==2.4.1 outdated 84 pgx v4 v5.10.0 84 goose v3.27.1 outdated 84 Logrus v1.9.3 outdated 84 mypy >=1.0 84 packaging ==26.0 outdated 84 reqwest 0.12 outdated 85 procfs v0.19.2 outdated 85 i18next ^26.0.6 85 uuid 1 86 env_logger 0.10.2 outdated 86 serde_with 2.0.1 outdated 86 typing_extensions ==4.15.0 outdated 87 AnyIO ==4.12.1 outdated 87 tailwind-merge ^2.5.4 outdated 88 Autoprefixer ^10.4.20 89 E2B ==2.15.2 outdated 89 OpenAI Agents SDK 89 playwright-python >=1.40.0 89 zerocopy 0.6.1 outdated 90 Clap 4 90 Clap 4.5.50 90 Ruff >=0.4 90 Tailwind CSS ^3.4.14 outdated 90 time =0.3.36 outdated 91 ebpf v0.17.3 outdated 91 go-containerregistry v0.21.6 outdated 91 prettier ^3.9.5 92 TanStack Query ^5.59.0 92 axum 0.7 outdated 92 axum 0.9 outdated 92 futures 0.3 92 client_golang v1.23.2 outdated 92 go-redis v9.7.0 outdated 92 LiteLLM >=1.83.0 92 lucide-react ^0.456.0 outdated 92 OpenTelemetry Rust 0.14.0 outdated 92 postcss ^8.4.47 92 undici ^6.19.8 outdated 93 @vitejs/plugin-react ^4.3.3 outdated 93 urfave/cli v1.22.15 outdated 93 urfave/cli v2.27.7 93 hyper 1 93 libc =0.2.158 outdated 93 Mermaid ^11.13.0 outdated 93 Pydantic 93 Tokio 1 93 Vitest ^2.0.5 outdated 94 Vite ^6.4.2 outdated 95 aiohttp >=3.9 95 containerd v1.7.32 outdated 95 containerd v1.10.0 95 containerd v2.2.2 95 React Router ^6.27.0 outdated 96 pytest >=7.0 96 Vue ^3.5.31 97 TypeScript ^5.5.4 outdated 98 Protocol Buffers ==7.34.0 outdated 98 React ^18.3.1 outdated 98 React DOM ^18.3.1 outdated

All 224 Dependencies

Join founders buildingwith open source

Search