fend

A sandboxed runtime that isolates package installs and dev scripts from your machine. Your code stays native — everything that executes runs in a lightweight micro-VM with zero access to your SSH keys, credentials, browser data, or anything else outside the project directory.