awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
bytecodealliance avatar

bytecodealliance/lucetArchived

0
View on GitHub↗
4,048 stars·167 forks·Rust·Apache-2.0·20 views

Lucet

Lucet is a WebAssembly runtime and sandboxing compiler that translates WebAssembly bytecode into native machine code. It serves as a secure execution environment and native code generator designed to run untrusted code while preventing unauthorized access to host system resources.

The project focuses on high-performance sandboxing by using ahead-of-time compilation to achieve near-native execution speeds. It implements software-based fault isolation and a host-call interface to manage secure communication and data exchange between the isolated module and the external host application.

The system provides capabilities for native machine code generation, linear memory mapping, and sandbox-based execution to ensure strong memory isolation.

Features

  • Code Execution Sandboxes - Provides a secure, isolated execution environment to run untrusted WebAssembly code without compromising host system resources.
  • WebAssembly AOT Compilers - Compiles WebAssembly bytecode into native machine code prior to execution for near-native performance.
  • Sandboxing Compilers - Translates WebAssembly bytecode into native machine code specifically for execution within a secure, isolated sandbox.
  • WebAssembly Sandboxing - Executes untrusted WebAssembly code in a secure environment to protect host memory and system resources.
  • WebAssembly Execution Modes - Provides a runtime that compiles and executes WebAssembly modules within a secure sandbox.
  • High-Performance Sandboxing - Achieves near-native execution speeds for isolated code by utilizing ahead-of-time compilation.
  • Machine Code Generation - Generates architecture-specific native machine code from WebAssembly bytecode to eliminate interpreter overhead.
  • Machine Code Generators - Converts portable WebAssembly instructions into optimized machine code specific to the host hardware.
  • Ahead-of-Time Wasm Execution - Implements ahead-of-time compilation of WebAssembly bytecode into native machine code for high-performance execution.
  • WebAssembly Runtimes - Acts as a high-performance execution environment for compiled WebAssembly modules with strong memory isolation.
  • Secure Execution Environments - Provides a sandboxed system designed to run untrusted code while preventing unauthorized host resource access.
  • Software-Based Fault Isolations - Implements software-based fault isolation to restrict memory access via guard pages and bounds checking.
  • Host-Call Interfaces - Provides a host-call interface to manage secure communication and data exchange between sandboxed modules and the host.
  • Isolated Code Execution - Ensures secure code execution by running programs in an isolated environment to prevent host system access.
  • Linear Memory Sharing - Utilizes linear memory mapping to provide fast indexing and memory isolation for WebAssembly modules.

Star history

Star history chart for bytecodealliance/lucetStar history chart for bytecodealliance/lucet

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Frequently asked questions

What does bytecodealliance/lucet do?

Lucet is a WebAssembly runtime and sandboxing compiler that translates WebAssembly bytecode into native machine code. It serves as a secure execution environment and native code generator designed to run untrusted code while preventing unauthorized access to host system resources.

What are the main features of bytecodealliance/lucet?

The main features of bytecodealliance/lucet are: Code Execution Sandboxes, WebAssembly AOT Compilers, Sandboxing Compilers, WebAssembly Sandboxing, WebAssembly Execution Modes, High-Performance Sandboxing, Machine Code Generation, Machine Code Generators.

What are some open-source alternatives to bytecodealliance/lucet?

Open-source alternatives to bytecodealliance/lucet include: wasmedge/wasmedge — WasmEdge is an extensible WebAssembly runtime that executes WebAssembly bytecode in a secure sandbox for cloud, edge,… bytecodealliance/wasm-micro-runtime. alibaba/opensandbox — OpenSandbox is a secure sandbox runtime and containerized code execution engine designed to run AI-generated code and… extism/extism — Extism is a cross-language WebAssembly plugin framework that lets applications written in any programming language… bytecodealliance/wasmtime — Wasmtime is a WebAssembly runtime and sandboxed bytecode executor designed to run WebAssembly bytecode on a host… gcc-mirror/gcc — This project is a multi-language compiler collection and cross-platform toolchain used to translate source code from…

Open-source alternatives to Lucet

Similar open-source projects, ranked by how many features they share with Lucet.
  • wasmedge/wasmedgeWasmEdge avatar

    WasmEdge/WasmEdge

    10,665View on GitHub↗

    WasmEdge is an extensible WebAssembly runtime that executes WebAssembly bytecode in a secure sandbox for cloud, edge, and embedded applications. It functions as a multi-language compiler, compiling applications written in Rust, JavaScript, Go, and Python into WebAssembly bytecode for sandboxed execution, and as a server-side JavaScript runtime that runs JavaScript programs with ES6 modules, NPM packages, and Node.js-compatible APIs. The runtime also serves as an AI inference runtime, executing AI models from JavaScript using WASI-NN plug-ins for inference tasks on personal devices and edge har

    C++artificial-intelligencecloudcloud-native
    View on GitHub↗10,665
  • bytecodealliance/wasm-micro-runtimebytecodealliance avatar

    bytecodealliance/wasm-micro-runtime

    5,990View on GitHub↗
    Caotassembly-scriptembedded
    View on GitHub↗5,990
  • alibaba/opensandboxalibaba avatar

    alibaba/OpenSandbox

    11,682View on GitHub↗

    OpenSandbox is a secure sandbox runtime and containerized code execution engine designed to run AI-generated code and scripts in isolated environments. It serves as a workload orchestrator that prevents host system contamination by utilizing kernel-level isolation to execute arbitrary commands and scripts. The project distinguishes itself by providing a model context server that bridges large language models to the sandbox for performing file operations and system commands. It also includes a remote GUI sandbox that supports browser automation and desktop interfaces via remote access protocol

    Python
    View on GitHub↗11,682
  • bytecodealliance/wasmtimebytecodealliance avatar

    bytecodealliance/wasmtime

    18,241View on GitHub↗

    Wasmtime is a WebAssembly runtime and sandboxed bytecode executor designed to run WebAssembly bytecode on a host system. It functions as an embeddable engine that integrates into applications through native APIs and language-specific bindings, as well as a standalone execution environment accessible via a command line interface. It is a WASI compatible runtime, implementing the WebAssembly System Interface to provide portable access to system resources. The engine utilizes a JIT compilation model to translate intermediate representation into optimized machine code for various CPU architecture

    Rustaotcraneliftjit
    View on GitHub↗18,241
See all 30 alternatives to Lucet→