* [gVisor release-20260316.0](https://github.com/google/gvisor) – Application kernel providing strong isolation between applications and the host operating system. * [Fence v0.1.35](https://github.com/Use-Tusk/fence) – Lightweight, container-free sandbox for running commands with network and filesystem restrictions. * [SandboxJS v0.8.34](https://github.com/nyariv/SandboxJS) – Safe JavaScript execution runtime that parses and runs code in a whitelisted, prototype-aware sandbox.