Ross ROSS = Recommend OSS · open-source software intelligence for agents

boxlite-ai/boxlite

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud. observed · 2026-10-18

github.com/boxlite-ai/boxlite · homepage · TypeScript · Apache-2.0 (permissive) observed · 2026-10-18

Health v2 · maintenance only

84/100

  • Activity 100
  • Release rhythm 100
  • Longevity 22
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 2.0
  • age_days: 317
  • days_rel: 3
  • days_push: 3
  • n_releases_24m: 47

Full methodology

Adoption not part of the score

2583 stars · 208 forks observed · 2026-10-18

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BoxLite is an embeddable micro-VM runtime written in Rust that runs any OCI image inside hardware-isolated virtual machines (KVM on Linux, Hypervisor.framework on macOS, WSL2 on Windows). It is designed as a secure compute substrate for AI agents, allowing untrusted or model-generated code to run in persistent, stateful sandboxes with no daemon and no root privileges.

Use cases

  • run LLM-generated code in a secure sandbox
  • execute untrusted third-party code safely
  • give AI agents an isolated environment to run code and browsers
  • run multi-tenant isolated workloads in a backend service
  • persist agent environments across sessions with installed packages and files
  • run a coding agent in an isolated VM
  • sandbox code execution in CI or code grading systems

When to choose

  • you need hardware-level isolation stronger than containers for untrusted code
  • you want an embeddable, daemonless sandbox library with no root requirements
  • you need persistent, stateful sandboxes that survive stop/start cycles
  • you want to run any OCI/Docker image unchanged in a microVM
  • you need controlled networking with egress allowlists and secret injection

When to avoid

  • you only need lightweight container-level isolation and shared-kernel namespaces are sufficient
  • your host lacks hardware virtualization support (KVM, Hypervisor.framework, or WSL2)
  • you need a fully managed sandbox service without running your own hypervisor infrastructure
  • you need Windows or BSD guest environments, since boxes run a Linux kernel

Facets

library · maturity active

security sdk developer-tools self-hosted artificial-intelligence security developer-tools cloud-computing windows rust python go cli self-hosted cloud microvm sandboxing untrusted-code-execution oci-images hardware-isolation agent-runtime daemonless kvm hypervisor-framework code-execution sandbox virtualization ai-agents linux macos nodejs

8 sources

Member repositories

RepositoryRoleHealth v2
boxlite-ai/boxlitemain84

For agents

markdown · JSON · MCP: product_card(name="boxlite-ai/boxlite")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem