All 225 Dependencies

Every package CubeSandbox depends on, ranked by repo health score.

CubeSandbox is an open-source sandbox service purpose-built to give AI agents secure, disposable compute at scale. Each sandbox boots as a dedicated MicroVM with its own Linux kernel on top of KVM, isolating agent-executed code at the hardware level rather than sharing a host kernel the way container-based sandboxes do. Cold starts average under 60ms and steady-state overhead per sandbox is under 5MB, so a single node can host thousands of concurrent, hardware-isolated environments — a density and speed profile aimed squarely at agent workloads that spin up and tear down sandboxes constantly.

Under the hood, CubeSandbox splits into a stateless control plane and a node-local data plane. CubeAPI (Rust/Axum) and CubeMaster (Go) handle scheduling and API traffic with all coordination state held in Redis, so either service scales out horizontally with no local state to reconcile. On each compute node, Cubelet drives the sandbox lifecycle through CubeShim, a containerd Shim v2 implementation that hands off to CubeHypervisor — a lightweight VMM built on RustVMM. Snapshotting and cloning go through CubeCoW, a Rust storage engine that uses the kernel's FICLONE ioctl for O(1), zero-copy snapshots, enabling hundred-millisecond-granularity checkpoint/rollback/fork of running sandboxes.

The project ships an E2B-compatible REST API, so existing E2B SDK code (Python, JS) can point at a self-hosted CubeSandbox cluster by changing only the API URL and key — no client-side rewrite. Security is handled at the network layer: all sandbox egress routes through CubeEgress, an OpenResty-based L7 proxy enforcing per-domain/path/method allowlists with automatic credential injection, so secrets used to call external APIs never enter the sandbox itself. CubeVS adds eBPF-based inter-sandbox isolation and SNAT egress at the kernel level.

Beyond the core runtime, CubeSandbox includes auto-pause/auto-resume for idle sandboxes, a pluggable Volume framework for custom storage backends, a WebUI/CLI for operators, and deployment tooling for single-node, Terraform-based Tencent Cloud clusters, and Kubernetes. Client SDKs are published for Python (PyPI), Go, and Node, and the project is maintained by Tencent Cloud with an active, CNCF-landscape-listed open-source community.

17 capng 0.2.2 23 capctl 0.2.0 23 netlink-packet-utils 0.4.1 outdated 23 scan_fmt 0.2.3 24 slog-async 2.7.0 28 slog-json 2.4.0 29 epoll 4.3.1 29 slog-stdlog 4.0.0 30 crc32c 0.6.3 30 slog-term 2.9.0 31 path-absolutize 1.2.0 outdated 33 dirs-rs 4.0.0 outdated 33 tokio-vsock 0.5.0 outdated 34 mdurl ==0.1.2 34 scopeguard 1.0.0 34 tailwindcss-animate ^1.0.7 36 syslog 6.1 outdated 38 byteorder 1.4.3 38 vmm-sys-util 0.12.1 outdated 39 slog-scope 4.1.2 40 h11 ==0.16.0 40 libfuzzer-sys 0.4.5 40 once_cell 1.16.0 41 Termion 4.0.3 41 dirs-next 2.0.0 41 vitepress-plugin-mermaid ^2.0.17 42 bincode 1.3.3 outdated 42 clsx ^2.1.1 42 protobuf 2.28.0 outdated 43 go-metrics v0.0.0-20200313005456-10cdbea86bc0 43 prometheus 0.14.0 44 cmdk ^1.0.0 44 libseccomp 0.3.0 outdated 44 libseccomp 0.2 outdated 44 netlink-sys 0.7.0 outdated 44 six ==1.17.0 45 dockerfile-parse ==2.0.1 45 jsonschema v0.13.0 outdated 45 remain 0.2.5 45 uuid v1.6.0 46 Validator 0.16 outdated 46 ipnetwork 0.17.0 outdated 46 jsoniter v1.1.12 46 rlimit 0.5.3 outdated 46 slog 2.5.2 47 go-cache v2.1.0+incompatible 48 errors v0.9.1 48 procfs 0.12.0 outdated 49 caps 0.5.0 49 gdbstub 0.6.3 outdated 49 gdbstub 0.2.4 outdated 51 Tower 0.4 outdated 51 fsnotify v1.9.0 outdated 51 seccompiler 0.3.0 outdated 51 websocket v1.5.4-0.20250319132907-e064f32e3674 52 inotify 0.9.2 outdated 52 netlink-packet-core 0.7.0 outdated 52 redigo v1.9.3 53 cfg-if 0.1.0 outdated 53 go-systemd v22.6.0 outdated 53 httpcore ==1.0.9 53 vm-memory 0.14.1 outdated 54 bracex ==2.6 outdated 54 governor 0.6 outdated 55 ArcSwap 1.1 55 go-yaml v1.19.2 56 base64 0.22.1 outdated 56 dotenvy 0.15 56 rich ==14.3.3 outdated 57 go-toml v1.9.5 57 go-toml v2.2.4 59 async-recursion 0.3.2 outdated 60 getrandom 0.2.7 outdated 60 sqlite v1.11.0 61 lazy_static 1.5.0 62 DashMap 5 outdated 62 io-uring 0.5.8 outdated 62 signal-hook 0.3.14 outdated 62 tempfile 3.1.0 62 virtio-bindings 0.1.0 outdated 62 virtio-bindings 0.11.0 outdated 63 backoff v7.0.0 outdated 63 i18next-browser-languageDetector ^8.2.1 63 tracing-opentelemetry 0.13.0 outdated 64 go-multierror v1.1.1 64 nix 0.29.0 outdated 64 postcard 1.0 64 serial_test 0.5.1 outdated 64 vfio-bindings 0.3.1 outdated 65 Chrono 0.4 65 kvm-bindings =0.8.1 outdated 65 kvm-bindings 0.17.0 outdated 65 ssh2-rs 0.9.3 66 HTTPX ==0.28.1 66 http-body 0.1 outdated 67 Certifi ==2026.2.25 outdated 67 anyhow 1 67 mini-swe-agent >=2.2.8 68 jwt v5.2.2 outdated 69 Fontsource Inter ^5.2.8 69 Fontsource Inter ^5.2.8 69 async-trait 0.1 70 Dockertest v3.12.0 70 logr v1.4.3 outdated 71 oci-spec =0.6.8 outdated 72 image-spec v1.1.1 72 python-dotenv 73 Pygments ==2.20.0 outdated 73 lipgloss v1.1.0 73 serde 1 73 serde 1.0.131 74 testify v1.11.1 outdated 75 Bubbles v1.0.0 75 bitflags 2.6.0 75 openapi-typescript ^7.13.0 75 toml 0.5.8 outdated 76 Requests >=2 76 regex 1.10.5 77 config 0.13 outdated 77 containerd-shim =0.9.0 outdated 77 containerd-shim =0.9.0 outdated 77 phf 0.11 outdated 77 tracing 0.1 77 tracing 0.2 outdated 77 tracing 0.3 outdated 78 Gin v1.11.0 outdated 78 Radix UI ^1.1.2 78 Radix UI ^2.1.2 outdated 78 Radix UI ^2.1.0 outdated 78 Radix UI ^1.2.0 78 Radix UI ^1.1.0 78 Radix UI ^1.1.0 78 Radix UI ^1.1.1 78 Radix UI ^1.2.2 78 Radix UI ^1.1.3 78 rtnetlink 0.14.0 outdated 78 thiserror 1 outdated 79 @dicebear/core ^9.4.2 outdated 79 @dicebear/core ^9.4.2 outdated 79 Wcmatch ==10.1 outdated 79 log 0.4.11 80 @e2b/code-interpreter ==2.4.1 outdated 80 netlink-packet-route 0.19.0 outdated 80 sysinfo 0.23.0 outdated 80 tsup ^8.2.4 outdated 81 Autoprefixer ^10.4.20 81 Zustand ^5.0.0 81 idna ==3.11 outdated 81 netlink v1.3.1 81 reqwest 0.12 outdated 81 runtime-spec v1.3.0 81 ttrpc =0.5.8 outdated 82 attrs ==25.4.0 outdated 82 class-variance-authority ^0.7.0 82 hyper-util 0.1 82 react-i18next ^17.0.4 83 MSW (Mock Service Worker) ^2.13.5 outdated 83 decimal v1.4.0 outdated 83 env_logger 0.10.2 outdated 83 futures 0.3 83 tower-http 0.5 outdated 83 vhost 0.11.0 outdated 83 vhost 0.15.0 outdated 84 Logrus v1.9.3 outdated 84 markdown-it-py ==4.0.0 outdated 84 mypy >=1.0 84 pgx v4 v5.10.0 84 procfs v0.19.2 outdated 84 serde_json 1 84 typing_extensions ==4.15.0 outdated 85 Bubble Tea v1.3.10 85 Go-MySQL-Driver v1.9.3 outdated 85 goose v3.27.1 outdated 85 miniredis v2.35.0 outdated 85 packaging ==26.0 outdated 87 AnyIO ==4.12.1 outdated 87 serde_with 2.0.1 outdated 87 uuid 1 88 Clap 4 88 Clap 4.5.50 88 OpenAI Agents SDK 88 python-dateutil ==2.9.0.post0 outdated 88 utoipa 5.4.0 outdated 88 zerocopy 0.6.1 outdated 89 ebpf v0.17.3 outdated 89 tailwind-merge ^2.5.4 outdated 89 time =0.3.36 outdated 90 E2B ==2.15.2 outdated 90 Tailwind CSS ^3.4.14 outdated 90 i18next ^26.0.6 91 Ruff >=0.4 91 axum 0.7 outdated 91 axum 0.9 outdated 91 go-containerregistry v0.21.6 outdated 91 go-redis v9.7.0 outdated 91 prettier ^3.9.5 92 @vitejs/plugin-react ^4.3.3 outdated 92 OpenTelemetry Rust 0.14.0 outdated 92 TanStack Query ^5.59.0 92 client_golang v1.23.2 outdated 92 lucide-react ^0.456.0 outdated 92 postcss ^8.4.47 92 undici ^6.19.8 outdated 93 LiteLLM >=1.83.0 93 Mermaid ^11.13.0 outdated 93 Pydantic 93 Tokio 1 93 Vitest ^2.0.5 outdated 93 hyper 1 93 libc =0.2.158 outdated 93 urfave/cli v1.22.15 outdated 93 urfave/cli v2.27.7 94 Vite ^6.4.2 outdated 94 playwright-python >=1.40.0 95 React Router ^6.27.0 outdated 95 TypeScript ^5.5.4 outdated 95 Vue ^3.5.31 95 aiohttp >=3.9 95 containerd v1.7.32 outdated 95 containerd v1.10.0 95 containerd v2.2.2 96 pytest >=7.0 98 Protocol Buffers ==7.34.0 outdated 98 React ^18.3.1 outdated 98 React DOM ^18.3.1 outdated

All 225 Dependencies

Join founders buildingwith open source