3 ms·
Packj sandbox [1] offers "safe installation" of PyPI/NPM/Rubygems packages. 1. https://github.com/ossillate-inc/packj/blob/main/packj/sandbox/README.md https:/
by ashishbijlani 4y ago
Packj sandbox [1] offers "safe installation" of PyPI/NPM/Rubygems packages.
1. https://github.com/ossillate-inc/packj/blob/main/packj/sandbox/README.md https://github.com/ossillate-inc/packj/blob/main/packj/sandb...
It DOES NOT require a VM/Container; uses strace. It shows you a preview of file system changes that installation will make and can also block arbitrary network communication during installation (uses an allow-list).
Disclaimer: I've been building Packj for over a year now.
- collinmanderson 4y agoOnly secures installation, not runtime, but still helpful. I'm not a package maintainer, but I do wish that packages were not allowed to run any code at install-time.