Executes untrusted or AI-generated code within secure, isolated Firecracker microVMs using the @deno/sandbox SDK.
Deno Sandbox provides a robust framework for creating isolated execution environments using Firecracker microVM technology, the same foundation used by AWS Lambda. It allows developers to safely run untrusted user submissions, AI-generated scripts, or multi-tenant processes with full hardware-level isolation, separate filesystems, and controlled network access. These sandboxes are optimized for speed, booting in under 200ms, making them an ideal choice for building secure code playgrounds, automated testing suites, and AI agent tool execution platforms within the Deno ecosystem.
主な機能
01Streaming I/O support for interactive and long-running processes
02Automatic resource management via the 'await using' lifecycle pattern
03Configurable CPU, memory, and disk resource limits
04Hardware-level isolation using Firecracker microVMs
05Full Linux environment with pre-configured Deno runtime
0617 GitHub stars
ユースケース
01Building secure web-based code playgrounds and IDEs
02Executing code generated by AI agents in a safe, restricted environment
03Running multi-tenant backend tasks that require strict process and filesystem isolation
