5 repos
Libraries and tools for secure file path handling, container runtime isolation, and privilege management on Linux and POSIX systems. The cluster spans low-level filesystem APIs (libpathrs, filepath-securejoin) and container orchestration platforms (Singularity, Apptainer) that share common concerns around path traversal prevention, secure privilege escalation, and cross-namespace operations. Most projects are implemented in Rust or Go, reflecting the security-critical nature of the domain.