anthropics/sandbox-runtime

★6,820TypeScript🇺🇸 North AmericaApache-2.0⑂ 604Issue 136Updated Oct 28, 2026

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Container-free OS sandboxing for safer AI agent processes — Anthropic released srt, a CLI and library that restricts filesystem and network access for arbitrary processes using native OS primitives (sandbox-exec on macOS, bubblewrap on Linux) instead of containers. Built as a research preview for Claude Code, it targets developers who need to lock down agents, local MCP servers, or bash commands with a secure-by-default, allowlist-based model.

Security

Metrics

Relative growth (7d)+17%Growth over the last 7 days relative to size
Acceleration+1106%Change in growth pace from the week before
Attention87The three metrics scaled to 0–100 and combined

Retention can be computed 30 days after a repository first trends (it isn't shown until then). See About for how each metric is defined.

Star growth and Trending appearances (last 30 days)

First listed+430★/dayDailyWeeklyMonthly
Sep 30, 2026Oct 29, 2026

Bands mark days on the trending list (darker = higher rank)

Daily trending ranks as a table (5 days)
DateDailyWeeklyMonthly
Oct 29, 2026—
typescript #7 +1,189
typescript #8 +1,453
Oct 28, 2026—
typescript #12 +1,151
—
Oct 27, 2026—
typescript #12 +1,085
—
Oct 26, 2026
typescript #5 +202
——
Oct 25, 2026
typescript #11 +650
—
typescript #15 +1,087

Created Oct 20, 2025 · First on trending Oct 25, 2026

Other notable repositories in the same category (Security)

See all Security repositories →

Get the weekly digest by email

Every Monday: the repositories that grew most last week, and how the buzz spread between the global and Japanese-language web. Unsubscribe any time. See the privacy and ad policy for how we handle your address.