kern-sandbox 0.1.21 → 0.1.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -140,7 +140,7 @@ new Sandbox({
|
|
|
140
140
|
timeoutS, // default 30, MANDATORY per-call deadline
|
|
141
141
|
network, // default false (RELAXES ISOLATION)
|
|
142
142
|
capDrop, // default ["ALL"]: capabilities dropped from every box. kern always drops
|
|
143
|
-
//
|
|
143
|
+
// 16 dangerous ones; this drops the rest, which were held over the box's own
|
|
144
144
|
// user namespace. Pass [] to keep them (needed only if the workload binds a
|
|
145
145
|
// port below 1024 INSIDE the box).
|
|
146
146
|
mounts, // { hostSrc: boxTarget } or { src: [target, "ro"] }
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kern-sandbox",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.22",
|
|
4
4
|
"description": "kern is a fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code; kern-sandbox is its Node/TypeScript binding. Run untrusted or agent-generated code (Python/JS/Bash) in a real, kernel-enforced box in single-digit milliseconds, with no cloud, no account and no VM.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"sandbox",
|