fence

{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "go"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Lightweight sandbox for commands with network and filesystem restrictions",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:37:34+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "fence",
  "github_default_branch": "main",
  "github_last_commit_at": "2026-06-16T16:05:01Z",
  "github_readme_excerpt": "![Fence Banner](assets/fence-banner.png)\n\n\u003cdiv align=\"center\"\u003e\n\n![GitHub Release](https://img.shields.io/github/v/release/fencesandbox/fence)\n[![Build and test](https://github.com/fencesandbox/fence/actions/workflows/main.yml/badge.svg?branch=main)](https://github.com/fencesandbox/fence/actions/workflows/main.yml)\n[![Docs](https://img.shields.io/badge/docs-fencesandbox.com-4c1?logo=bookstack\u0026logoColor=white\u0026color=mediumslateblue)](https://fencesandbox.com/docs)\n[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/fencesandbox/fence)\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n\n\u003c/div\u003e\n\nFence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It\u0027s most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth.\n\n```bash\n# Block all network access (default)\nfence curl https://example.com  # \u2192 403 Forbidden\n\n# Allow specific domains\nfence -t code npm install  # \u2192 uses \u0027code\u0027 template with npm/pypi/etc allowed\n\n# Block dangerous commands\nfence -c \"rm -rf /\"  # \u2192 blocked by command deny rules\n```\n\n\u003cp align=\"center\"\u003e\n    \u003cimg src=\"assets/demo.gif\" alt=\"Fence Claude Code demo\" width=\"800\"\u003e\n\u003c/p\u003e\n\nFence is also a permission manager for your CLI agents. **Works with popular coding agents like Claude Code, Codex, Amp, Gemini CLI, GitHub Copilot, OpenCode, Factory (Droid) CLI, and many more** - see [agents.md](./docs/agents.md).\n\n## Install\n\n\u003e [!NOTE]\n\u003e Fence has moved from `github.com/Use-Tusk/fence` to `github.com/fencesandbox/fence`.\n\u003e If you installed with Homebrew from the old Tusk tap, switch to the new tap:\n\u003e\n\u003e ```bash\n\u003e brew uninstall use-tusk/tap/fence\n\u003e brew untap use-tusk/tap\n\u003e brew tap fencesandbox/tap\n\u003e brew install fencesandbox/tap/fence\n\u003e ```\n\u003e\n\u003e If you installed with",
  "github_repo": "Use-Tusk/fence",
  "github_stars": 808,
  "github_topics": [
    "bubblewrap",
    "code-security",
    "coding-agent",
    "landlock",
    "sandbox",
    "seatbelt",
    "seccomp",
    "socat"
  ],
  "homepage": "https://github.com/Use-Tusk/fence",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 94,
  "installs_365d": 1109,
  "installs_90d": 602,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "Apache-2.0",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "fence",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 3562,
  "rank_365d": 3668,
  "rank_90d": 2688,
  "raw_hash": "5460c25ebe331215",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/f/fence.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "0.1.60",
  "versioned_formulae": [],
  "why_use_this": null
}