PyRank
  • Search
  • PyPI
  • GitHub
  • Insights
  • Compare
  • Advisories
  • Ecosystem
  • About

Sandbox Python Packages

Python packages with the GitHub topic sandbox. Sorted by monthly downloads, with stars and forks.
pydantic
pydantic-monty

A minimal, secure Python interpreter written in Rust for use by AI

4.6M 9K 451
pydantic
pydantic-monty-runtime

A minimal, secure Python interpreter written in Rust for use by AI

3.6M 9K 451
pydantic
pydantic-monty-client

A minimal, secure Python interpreter written in Rust for use by AI

3.2M 9K 451
kubernetes-sigs
k8s-agent-sandbox

agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).

1.1M 4K 562
tensorlakeai
tensorlake

Tensorlake is a serverless runtime for sandboxes and deploying background agentic applications

655K 1K 148
opensandbox-group
opensandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

554K 16K 1K
runloopai
runloop-api-client

Official Python SDK for Runloop β€” secure Linux sandboxes (Devboxes) where AI agents run code, edit files, and expose ports

501K 28 2
vstorm-co
pydantic-ai-backend

File Storage & Sandbox Backends for Pydantic AI: console tools for file operations, Docker-isolated sandboxes for safe execution, and permission system with presets for access control. Enables secure multi-user handling and testing in agents via in-memory, local, or containerized storage.

361K 130 27
boxlite-ai
boxlite

The micro-VM for AI agents β€” light enough to embed on your laptop, elastic enough to power an agentic cloud.

94K 3K 205
datalayer
jupyter-kernel-client

πŸͺ > Jupyter Kernel Client through HTTP and WebSocket.

94K 22 12
datalayer
code-sandboxes

πŸ“¦ Code Sandboxes β€” Run code in isolated sandbox variants through a unified API.

84K 6 1
shroominic
codeboxapi

πŸ‘ΎπŸ“¦ CodeBoxAPI is the simplest sandboxing infrastructure for your LLM Apps and Services.

79K 363 41
opensandbox-group
opensandbox-code-interpreter

Secure, Fast, and Extensible Sandbox runtime for AI agents.

54K 16K 1K
superradcompany
microsandbox

🧱 easy, fast, programmable and local-first microVM runtime and library

45K 9K 472
bmsuisse
pydeno

Run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.

45K 1 0
yaroslaff
evalidate

Safe and fast evaluation of untrusted user-supplied python expressions

34K 42 5
scaleapi
agentenv-framework-protocol

Creating realistic RL environments requires collaboration between researchers, engineers, and domain experts across many dimensions: artifacts, environments tools, dynamism of the environment, reproducibility, and more. There is no open source framework for building these environments effectively. Until now.

27K 231 21
polyaxon
polyaxon

AI Infra / AI Orchestration / AI Control Plane

27K 4K 330
footprintai
containarium-telemetry

Open-source agent runtime β€” SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

24K 301 51
gowrishankar-infra
velaris-lang

Run code an AI wrote without handing it everything you can reach. Each function declares what it may touch. You grant the run one folder, one host or a number of calls, and the runtime refuses anything else the moment it's tried.

23K 4 0
getkern
kern-sandbox

Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.

23K 435 11
scaleapi
agentenv-framework

Creating realistic RL environments requires collaboration between researchers, engineers, and domain experts across many dimensions: artifacts, environments tools, dynamism of the environment, reproducibility, and more. There is no open source framework for building these environments effectively. Until now.

23K 231 21
opensandbox-group
opensandbox-server

Secure, Fast, and Extensible Sandbox runtime for AI agents.

20K 16K 1K
sattyamjjain
agent-airlock

A type-checker and contract layer for AI agent tool calls, deny-by-default, in-process, Pydantic-only. Strict argument validation, ghost-argument stripping, and self-healing retries for MCP servers and agent frameworks.

19K 16 4
    • Original data from PyPI, GitHub, and OSV; downloads served through ClickHouse
    • Sources & methodology