A batteries-included framework for building web apps

The Chrome OS Virtual Machine Monitor - Mirror of https://chromium.googlesource.com/crosvm/crosvm/

OpenFeature specification

IaC Factories in One Binary

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Awesome Code Sandboxing for AI

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

Open-source AI sandbox infrastructure with unified API for VMMs -- Firecracker, QEMU and libkrun.

Bake microVMs into standalone executables

Self-Hostable MicroVMs for your Agents

what JS knows, now CSS knows

Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.

The sandbox agent framework.

The fast all-in-one Node.js toolkit

A standalone command-line version of Soulver (for macOS)

Web-based browser profile manager for CloakBrowser — create, launch, and manage isolated browser profiles with unique fingerprints. Free, self-hosted Multilogin alternative

Google Cloud Knowledge Catalog Tools and Samples

Mermaid.js, but headless, in Rust.

Production-grade engineering skills for AI coding agents.

PostgreSQL connection pooler, load balancer and database sharder.

A curated list of excellent books to learn PostgreSQL — from beginner‑friendly introductions to advanced internals, administration, and performance tuning.

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

Datatype is a variable font that turns text into charts.

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

A native GUI HTTP client written in Rust

Policy-controlled microVM sandboxes for safe, reproducible repo workloads.

PostgreSQL in-database durable execution

Personal AI, On Personal Devices

A fast, helpful, and open-source document parser