React Flow | Svelte Flow - Powerful open source libraries for building node-based UIs with React (https://reactflow.dev) or Svelte (https://svelteflow.dev). Ready out-of-the-box and infinitely cust…

Leash by StrongDM - take your AI agents for a walk

Easy Linux virtual machine on MacOS to sandbox LLM agents.

Experimental Linux microvm setup with a TypeScript Control Plane as Agent Sandbox

Matchlock secures AI agent workloads with a Linux-based sandbox.

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal com…

KDE Plasma Desktop container designed for Kubernetes, supporting OpenGL EGL and GLX, Vulkan, and Wine/Proton for NVIDIA GPUs through WebRTC and HTML5, providing an open-source remote cloud/HPC grap…

A Jellyfin client for Linux focused on music.

🦅 EACL: Enterprise Access ControL is a ReBAC Authorization system based on SpiceDB, built in Clojure and backed by Datomic

A community trust management system based on explicit vouches to participate.

DoNotNotify app

A security-focused library OS supporting kernel- and user-mode execution

Comma runs software without installing it. [maintainers=@Artturin,@burke,@DavHau]

Collection of USB hacking links and materials for my talk on the topic

bluetooth mesh chat, IRC vibes

HTTP(s) request filter for processes

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

Secure, kernel-enforced sandbox for AI agents, MCP and LLM workloads. Capability-based isolation with secure key management and blocking of destructive actions in a zero-trust environment.

Open source local sandboxing for running AI generated code.

muvm - run programs from your system in a microVM

containerd sandbox runtime using vms

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

A developer experience centered on CUE. Unifies schemas, data models, deterministic and agentic code generation, workflow and task engine, dagger powered environments, coding assistant, and vscode …

🌉 A bridge between decentralized social networks

backup manager for android

Bichon – A lightweight, high-performance Rust email archiver with WebUI

Azure Container Registry as an auto-authorized, pull-through Docker Hub proxy.

ZeroFS - The Filesystem That Makes S3 your Primary Storage. ZeroFS is 9P/NFS/NBD on top of S3. Initially built for www.merklemap.com

⚡ Better `pre-commit`, re-engineered in Rust