What Tablif read on CapLock's site
CapLock describes itself as: “GitHub - ulykbek11/caplock: Sandbox npm dependency install scripts with least-privilege filesystem, environment, network, and process access. · GitHub”
- Stage: Live, no waitlist
What it is
Calls itself “runtime sandbox”.
- Calls itself: runtime sandbox
“A cross-platform runtime sandbox for npm and pnpm dependency lifecycle scripts.”
Where it puts itself
Rules out “Linux ARM64” and “Windows ARM64”.
- Says it will not: Linux ARM64 · Windows ARM64
“Linux ARM64 is not included in the v1 release matrix.”
“Windows ARM64 is not supported in v1.”
Who it sells to
Sells to developers.
- Sells to: developers
“CapLock is a cross-platform CLI that protects npm and pnpm projects from malicious lifecycle scripts.”
How it runs
A command-line tool for Linux, Windows and macOS. Runs locally and works offline. Distributed through the npm. No API. Open source.
- Kind: cli
- Runs on: Linux · Windows · macOS
- Runs where: on the device, offline
- Distributed via: npm
- API: no
- Open source: yes
“CapLock is a cross-platform CLI that protects npm and pnpm projects from malicious lifecycle scripts.”
“Linux x64 (release-tested)”
What it works with
Names npm and pnpm on its pages.
- Names: npm · pnpm
“CapLock is a cross-platform CLI that protects npm and pnpm projects from malicious lifecycle scripts.”
What it offers as proof
Live, no waitlist. Publishes docs.
“README.md -> https://github.com/ulykbek11/caplock/blob/main/README.md”
Sources
Tablif read these pages, last on 28 Sept 2026. Everything above is what the product says about itself; Tablif does not verify every claim.
Similar products in Tablif Town
- Warden: Sandbox your MCP servers. Control every permission.
- sandbin: Run untrusted code and survive it — no Docker, no root
- A usable macOS sandbox for Claude Code: Why run claude when you can run it sandboxed with sclaude?
- VaultScript: Production-ready React Native secure local vault boilerplate
- Adios.dev - AI Workspace: Secure code execution sandboxes for AI agents.
- Capybari: Keep building software when no one is left to touch it
- Semwright: Give AI agents structured access to real software
- CompatLab: Check npm package loading on Node.js, Bun and Deno