Registry › Compare › Cube Sandbox vs OpenSandbox

Cube Sandbox vs OpenSandbox

Both are Grade B and 0.7 points apart, so choose on what you weigh most. Cube Sandbox leads on supply-chain integrity; OpenSandbox leads on adoption.

B Cube Sandbox 72.5

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

TencentCloud/CubeSandbox · #307 overall · #5 Sandboxes & Runtimes · coverage B (3/5)

Choose Cube Sandbox if supply-chain integrity matters most.

+3.1Safety / Integrity: 94% of recent commits signed, against 35%

B OpenSandbox 73.2

Secure, Fast, and Extensible Sandbox runtime for AI agents.

opensandbox-group/OpenSandbox · #293 overall · #4 Sandboxes & Runtimes · coverage B (3/5)

Choose OpenSandbox if adoption matters most.

+3.1Adoption: 328.9k weekly downloads against 2.6k

Where they differ

10.9

Safety / IntegrityCube Sandbox +3.1

7.8

12.8

TransparencyCube Sandbox +0.2

12.6

14.4

AdoptionOpenSandbox +3.1

17.5

+3.7

Runtime calibrationOpenSandbox +0.9

+4.6

2 dimensions identical: Identity 10.8 · Maintenance 19.9 · Full evidence table

An independent, evidence-based trust comparison of Cube Sandbox and OpenSandbox, two Sandboxes & Runtimes projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	Cube SandboxTencentCloud/CubeSandbox	OpenSandboxopensandbox-group/OpenSandbox
HVTrust score	72.5	73.2
Evidence grade	B	B
Coverage grade	B	B
Overall rank	#307	#293
Rank in Sandboxes & Runtimes	#5	#4
GitHub stars	13.1k	16.4k
Last updated	1d ago	1d ago
Build provenance	No	No
OSSF Scorecard	5.0 / 10	4.8 / 10
License	NOASSERTION	Apache-2.0
Downloads	3k/wk	329k/wk
Trust dimensions (points earned)
Safety / integrity / 25	10.9	7.8
Identity & provenance / 18	10.8	10.8
Transparency / 17	12.8	12.6
Maintenance / 20	19.9	19.9
Adoption / 20	14.4	17.5
Runtime capability surface (full matrix)
MCP server	—	Implemented
External providers	—	2 — Postgres, Redis
Requires API keys	No	No
Plugin surface	plugins	extensions
Provenance drift	Match	Match

Open in the live compare tool → Cube Sandbox profile OpenSandbox profile More Sandboxes & Runtimes →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →