{"adoption": {"forks": 359, "observed_at": "2026-08-28T04:08:34.243334+00:00", "stars": 4074}, "canonical_url": "https://ross.abutalabs.com/products/nsjail", "card": {"archived": false, "artifact_type": "cli-tool", "description": "A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.", "domain": ["security", "developer-tools"], "enriched": true, "function": ["security", "cli", "developer-tools"], "health_score": 98, "homepage": "https://nsjail.dev", "language": "C++", "license": "Apache-2.0", "license_family": "permissive", "maturity": "stable", "member_repos": ["google/nsjail"], "name": "google/nsjail", "platform": ["cli"], "pushed_at": "2026-08-26T19:39:10+00:00", "repo": "google/nsjail", "stars": 4074, "tags": ["sandboxing", "process-isolation", "namespaces", "seccomp", "cgroups", "chroot", "fuzzing-support", "command-line", "linux"], "topics": ["security", "linux-namespaces", "linux", "process-isolation", "seccomp-bpf-policies", "chroot"], "urls": [], "use_cases": ["sandbox an untrusted binary with namespaces and seccomp filters", "run a network service in an inetd-style jail that forks per connection", "repeatedly execute a target process for fuzzing", "limit CPU, memory, and file descriptor usage of child processes", "isolate processes with chroot, pivot_root, and read-only bind mounts", "run commands as an unprivileged user inside a restricted environment"], "what_it_is": "NsJail is a lightweight Linux process isolation tool that uses namespaces, cgroups, rlimits, and seccomp-bpf syscall filters (via the Kafel BPF language) to sandbox untrusted processes. It supports inetd-style TCP listeners, one-shot execution, and repeated re-execution modes, making it useful for sandboxing network services and fuzzing targets.", "when_to_avoid": ["you need cross-platform sandboxing on macOS or Windows", "you prefer container-based isolation with full images and orchestration (use Docker instead)", "your kernel lacks support for user namespaces or seccomp-bpf"], "when_to_choose": ["you need fine-grained Linux sandboxing with namespaces, cgroups, and seccomp-bpf in one tool", "you want to sandbox network services or fuzzing targets on Linux", "you need resource limits and filesystem isolation for untrusted code"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/nsjail", "repo": "google/nsjail", "role": "main", "score": 91}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:34.243334+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:23:28.960190+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fd1f0b958bda72b9dbcfbc45a20ee661483e43c22759fb499174d515a8a4b16c", "fetched_at": "2026-08-28T04:08:34.243334+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/nsjail"}, {"content_hash": "1eba754c674c9665873a04df75ee2386682bd44a1b8ad581eafff10292ffd53c", "fetched_at": "2026-08-29T09:15:26.121007+00:00", "kind": "homepage", "missing": false, "url": "https://nsjail.dev"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 75}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4129, "days_push": 7, "days_rel": 168, "gap_med": 13, "n_releases_24m": 2}, "score": 91, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}