All 60 Dependencies

Every package OpenSandbox depends on, ranked by repo health score.

OpenSandbox is a general-purpose sandbox platform designed for AI applications that need safe, reproducible execution environments. Originally built by Alibaba Group, it provides a unified control plane for creating and managing sandboxes across Docker and Kubernetes backends, making it suitable for everything from local development to large-scale distributed AI agent deployments.

The platform ships multi-language SDKs in Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go — all implementing the same Sandbox Protocol, which defines lifecycle management and execution APIs in a vendor-neutral way. This means teams can write agent code once and run it against any conforming runtime implementation. The built-in MCP server further allows MCP-capable clients like Claude Code and Cursor to create and operate sandboxes without custom integration code.

OpenSandbox focuses on security through layered isolation: it supports gVisor, Kata Containers, and Firecracker microVM as secure container runtimes, an egress proxy with per-sandbox network policy enforcement, a DNS proxy for outbound traffic control, and a credential vault that injects secrets into workloads without exposing them directly. These features address a core challenge in AI agent deployment — you need fast iteration but cannot allow untrusted code to reach arbitrary infrastructure.

The project is listed in the CNCF Landscape and holds an OpenSSF Best Practices badge, signaling production readiness. It covers broad AI scenarios: coding agents (with examples for Claude Code, Gemini CLI, OpenAI Codex, Qwen), browser automation (Chrome, Playwright), desktop environments via VNC, and reinforcement learning training workloads — all with a consistent SDK and API surface.

45 uuid v1.6.0 46 mock v1.6.0 47 tomli >=2.0.0 51 pty v1.1.24 51 websocket v1.5.4-0.20250319132907-e064f32e3674 53 PyYAML >=6.0,<7.0 56 HTTPX >=0.27.0,<1.0 56 pytest-timeout >=2.1.0 57 rich >=13.0.0,<14.0 outdated 65 dns v1.1.61 outdated 65 tsup ^8.5.1 67 pytest-order >=1.2.0 69 python-multipart >=0.0.31 70 stable-baselines3 ==2.3.2 outdated 71 doublestar v4.9.1 outdated 72 globals ^17.0.0 73 python-dateutil >=2.8.2,<3.0 74 go-toml v2.2.2 75 testify v1.11.1 outdated 76 logr v1.4.3 outdated 77 Gin v1.10.0 outdated 78 TensorBoard ==2.16.2 outdated 78 openapi-typescript ^0.14.1 outdated 78 openapi-typescript ^7.13.0 80 attrs >=21.3.0 80 miniredis v2.37.0 outdated 81 Ginkgo v2.22.0 82 Go-MySQL-Driver v1.8.1 outdated 84 cryptography >=48.0.1 84 validator v10.28.0 outdated 85 OpenSandbox >=0.1.9,<0.2.0 outdated 86 Gomega v1.36.1 outdated 86 PyJWT >=2.13.0 88 Click >=8.1.0,<9.0 89 Gymnasium ==0.29.1 outdated 89 pydantic-settings >=2.14.2 89 python-sdk 90 docker-py 90 websockets >=14.0 91 FastAPI >=0.137.0 91 Uvicorn 91 go-redis v9.18.0 outdated 91 pytest-asyncio >=0.21.0 92 gopsutil v3.21.11+incompatible outdated 92 undici ^7.28.0 outdated 93 OpenTelemetry Prometheus Exporter 93 OpenTelemetry Prometheus Exporter 93 OpenTelemetry Python SDK 93 Pydantic >=2.4.2,<3.0 93 Vitest ^4.1.0 outdated 94 Starlette >=1.3.1 94 Vite ^6.4.3 outdated 94 kubernetes 94 redis-py >=5.0,<6.0 outdated 94 typescript-eslint ^8.59.0 95 ESLint ^9.39.4 outdated 95 ESLint ^9.39.4 outdated 96 PyTorch ==2.12.0 outdated 96 pytest >=9.0.3 97 TypeScript ^5.7.2 outdated

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers