All 31 Dependencies
Every package sandboxd depends on, ranked by repo health score.
sandboxd is the open-source backend that powers AI app-builder products like Lovable, Bolt, or Replit — self-hosted on your own server. Send it a single HTTP request and it creates a private, isolated Linux container, runs a coding agent inside it (OpenCode and Claude Code CLIs ship pre-installed), and exposes the running app at a shareable preview URL. All of this happens on one ordinary machine, not a Kubernetes cluster.
The platform is engineered for density and cost efficiency. Sandboxes stop automatically when idle, releasing their memory, and wake transparently the instant a user opens their preview link — files on disk are preserved the whole time. One affordable server can host dozens of active users instead of requiring a separate VM per tenant.
The control plane is deliberately minimal: a single Go binary that shells out to the Docker CLI, with Traefik handling edge routing and SQLite as the only database. No message queue, no separate database server, no orchestrator. The entire control plane can be read and understood in an afternoon, which makes self-hosting, auditing, and contributing straightforward for any Go-familiar developer.
sandboxd is MIT-licensed and ships production-ready hardening out of the box: each container gets a read-only rootfs, dropped capabilities, PID and file-descriptor limits, and a hard memory ceiling. A reconciler re-converges Docker to the SQLite source of truth on every boot, so a server restart never silently loses sandbox state.
