{"repo":"h5i-dev/senv","free":true,"listed":false,"github":"https://github.com/h5i-dev/senv","clone":"git clone https://github.com/h5i-dev/senv.git","description":"Sandboxed Python environments with the uv workflow. Registry-only installs, read-only dependencies, and deny-by-default networking. Local-first. No SaaS account required.","language":"Rust","stars":42,"topics":["ai-orchestration","claude-code","codex","multi-agent","agentic-ai","agentic-workflow","ai-agents","ai-coding","coding-agents","developer-tools"],"license":"Apache-2.0","category":"ai-agents","readme_excerpt":"senv Sandboxed Python environments, with the workflow of uv. senv adds an OS-level security boundary to Python environments. It keeps the familiar uv workflow while isolating dependency installation and application execution from your credentials, network, and the rest of your machine. 📦 Install packages with registry-only network access 🔒 Run Python with no network by default 🧊 Keep the environment read-only while code runs 🧾 Review policy, denials, and execution receipts A senv project is still a uv project. It uses the same pyproject.toml and uv.lock , and teammates without senv can continue using uv directly. --- Why senv? venv and uv isolate dependencies, but they do not isolate code. A package inside a virtual environment can still: - read files such as /.ssh ; - access environment variables and credentials; - connect to arbitrary network destinations; and - execute build code during installation. A virtual environment is a PATH convention, not a security boundary. senv puts a sandbox underneath the Python workflow, with separate policies for the two moments that carry different risks: - Install: package build code can reach approved registries, but not your source tree or credentials. - Run: your project is writable, but the installed environment is read-only and network access is denied by default. --- Install The script picks the build for your platform, checks it against the SHA-256 published beside it, and installs to /usr/local/bin . Set SENV INSTALL DIR to in","default_branch":null,"files":null,"tree":[],"storefront":"/r/h5i-dev","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/h5i-dev/senv/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}