ioi/isolate
Sandbox for securely executing untrusted programs observed · 2026-08-28
Health v2 · maintenance only
77/100
- Activity 99
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4056
- days_rel: n/a
- days_push: 10
- n_releases_24m: 0
Adoption not part of the score
1473 stars · 203 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Isolate is a Linux sandbox for securely executing untrusted programs, originally built for programming contest judges. It uses kernel features like namespaces, control groups, and seccomp to confine executables from the host system.
Use cases
- run untrusted code safely on linux
- sandbox submissions in a programming contest judge
- execute user-supplied programs with resource limits
- isolate processes from the host filesystem and network
- build an online judge execution backend
When to choose
- you need to run untrusted executables on Linux with strong isolation
- you are building a competitive programming judge or automated grading system
- you want a lightweight CLI sandbox using namespaces and cgroups without containers
When to avoid
- you need sandboxing on macOS, Windows, or BSD - Isolate is Linux-only
- you want full container images and orchestration rather than a single-process sandbox
- you need a general-purpose container runtime like Docker or Podman
Facets
cli-tool · maturity stable
security cli security developer-tools operating-systems cli sandbox untrusted-code-execution namespaces cgroups competitive-programming judge-systems sandboxing linux
1 source
- readme: https://github.com/ioi/isolate · fetched 2026-08-28 · 0a03a7a4572b
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ioi/isolate | main | 77 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem