Ross ROSS = Recommend OSS · open-source software intelligence for agents

gVisor

Application Kernel for Containers observed · 2026-10-17

github.com/google/gvisor · homepage · Go · Apache-2.0 (permissive) observed · 2026-10-17

Health v2 · maintenance only

100/100

  • Activity 100
  • Release rhythm 99
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 7
  • age_days: 3099
  • days_rel: 4
  • days_push: 4
  • n_releases_24m: 8

Full methodology

Adoption not part of the score

19696 stars · 2057 forks observed · 2026-10-17

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-19, confidence 0.97

gVisor is an open‑source application kernel that provides a Linux‑compatible sandbox for containers, running entirely in userspace. It includes the runsc OCI runtime and integrates with Docker, Kubernetes and containerd.

Use cases

  • run untrusted code in containers with strong isolation
  • sandbox containers in Kubernetes clusters to prevent escapes
  • add a security layer to Docker workloads without heavy VM overhead
  • run multi‑tenant workloads safely on shared hosts
  • enable container checkpoint/restore for stateful applications

When to choose

  • need strong isolation comparable to VMs but with low overhead
  • running untrusted or third‑party code in containers
  • using OCI‑compatible tooling like Docker or Kubernetes
  • requiring runtime monitoring and threat detection for containers

When to avoid

  • performance‑critical workloads that cannot tolerate extra syscall overhead
  • environments lacking Linux 5.6+ or required kernel features
  • need full kernel compatibility for specialized syscalls (e.g., io_uring)

Facets

application · maturity active

security security cloud-computing container-runtime oci docker kubernetes application-kernel sandbox runsc gvisor sandboxing containers linux

10 sources

Member repositories

RepositoryRoleHealth v2
google/gvisormain100
google/netstackmirror10
google/gvisor-containerd-shimplugin10

For agents

markdown · JSON · MCP: product_card(name="google/gvisor")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem