A sandbox for coding agents with parametrized state.

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

Landlook — Interactive Landlock Profiler

mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, and diagnostics.

Document viewer

Goldmark extension for rendering pikchr diagrams

A design reflection about the representation of missing values.

Read-only mirror of file CVS repository, updated every half hour. NOTE: do not make pull requests here, nor comment any commits, submit them usual way to bug tracker or to the mailing list. Maintai…

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Package heap implements a generic heap data structure.

Wayland Maker - A Wayland compositor inspired by Window Maker

A binary and file access authorization system for macOS.

A port of the pikchr markup language interpreter to pure Go

asynchronously synchronise local NSS databases with remote directory services

Old Unix programs running on modern computers.

Let's Encrypt/ACME client and library written in Go

Creating and applying the Landlock ruleset.

Haskell bindings for the Linux Landlock API

turn your Go program(s) into an appliance running on the Raspberry Pi 3, Pi 4, Pi 5, Pi Zero 2 W, or PCs (x86_64 or ARM64)!

Prometheus exporter to be alert about nearby xkcd Geohashes.

Authenticationless HTTP file upload server

Sandboxing for GNU Make has never been easier

Functions that populate the Landlock ruleset. Written as an example.

OpenBSD unveil(2) like function in Linux using Landlock

Port of Simon Tatham's Portable Puzzle Collection to the PocketBook eReader platform

Go package for easy WebAuthn integration