Repository navigation
Releases
v0.0.22
SDK and CLI 0.0.22.
This release updates the engine: the Userspace runtime reserves its working memory in one step when it starts.
Fewer memory growths at start. The Userspace engine now takes its heap headroom (320 MiB) in one memory growth when its state starts, instead of growing WebAssembly memory about 290 times in small steps during the first heavy command. Each growth gave the browser a new buffer to account for and triggered extra garbage collections. In diagnostic measurements of a mobile Python workload in an Android emulator, the first CPU-heavy command ran about 18% faster; repeated commands, VM start and peak browser memory stayed the same. If the browser refuses the reservation, the engine continues as before.
Only the Userspace engine module changes. Version 0.0.21 was not published; 0.0.22 follows 0.0.20. The engine interfaces are unchanged, and the Python + pandas starter image stays at 0.0.2.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
sdk-materials-v0.0.22
SDK and CLI 0.0.22 license materials.
The licenses.tar.gz bundle includes the actual package notices, SBOMs, and the separately pinned engine terms, notices, and compliance manifest. See SHA256SUMS and CONTENTS.SHA256.
Image source downloads
Image oxidevm-starter-pandas 0.0.2, manifest SHA-256 1323e3059072332eb3c7760105e6a3364a28d79ecb0bbfb275899c54418fd294.
These downloads are supplied under each component's original license.
They require no account or commercial engine license. The image bundle also
contains its corresponding source archives. Published source kits are retained
permanently under the release policy.
- Open-source notice and component index
- Complete license and copyright notices
- Checksums
- SPDX inventory and CycloneDX SBOM
- Complete source and license bundle
- Image source release
| Component | License | Downloads | Source archive SHA-256 |
|---|---|---|---|
| bzip2 1.0.8-r6 | bzip2-1.0.6 | Source archive · Build instructions | 5e82fee5cfcd1a6e7df9c51b65d40d2c363830ac5dd9730d5f83839698139b3b |
| ca-certificates 20260611-r0 | MPL-2.0 AND MIT | Source archive · Build instructions | 47160bc635531bad50181f71f74a49efcd0f57342eac93a78a8f37dad6ef1296 |
| curl 8.23.0 | curl | Source archive · Build instructions | a875f2dab2669e19a87c5259b8fef04fdd62db31846eba653201b19fac578ff2 |
| dash 0.5.13.5 | BSD-3-Clause AND Apache-2.0 | Source archive · Build instructions | e2a7dd1ea5f76fb032ca36681f16cbe3d0354133b88d0aa63f43d60151b466f2 |
| dc 7.0.3 | BSD-2-Clause | Source archive · Build instructions | 390977a43b74fbc0d3407a510b406db843880f5021aaf725d4a8409a687518c2 |
| dropbear 2026.94 | MIT AND BSD-2-Clause AND SSH-short | Source archive · Build instructions | 3f8f2eb0634e65726bcb67b0d1e308018cefc01ba8909a727fb68ccd49d038cd |
| expat 2.9.0-r0 | MIT | Source archive · Build instructions | 0c6f3ebcf78028f540f68e8aec6c8b3568dba0c4e0610078e4b455e1e711cdaa |
| gcc-runtime 15.2.0-r5 | GPL-3.0-or-later WITH GCC-exception-3.1 | Source archive · Build instructions | 5385a0c64d2315e640c2cf18b0371b354b78c79651ba174961471797df21e582 |
| libarchive 3.8.10 | BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 | Source archive · Build instructions | 5595fe3313b314e291da627a2b1d339ef9703baec7fd90b39172e2e2abeff3bd |
| libffi 3.5.2-r0 | MIT | Source archive · Build instructions | 618a71dd4be71ac32e7cb67d0bf10f47902e3ad1ee200154ffe0a578c2c6c54f |
| libtomcrypt dropbear-2026.94 | WTFPL | Source archive · Build instructions | f28e8fa028dcc96e4f77c046622f2d1e916167fcd6f988943ee66081b0bde1d9 |
| libtommath dropbear-2026.94 | Unlicense | Source archive · Build instructions | 64eb59c6084c8a26908f639b97f1a6ca5d69ee27281a52bd38be9a8374456325 |
| mksh 59c-r4 | MirOS AND Unicode-DFS-2016 | Source archive · Build instructions | da3facdf7876b508ae758e94b9fead639c5d0491bb37a3b5890eb77b075c3025 |
| mpdecimal 4.0.1-r0 | BSD-2-Clause | Source archive · Build instructions | 06f196d00fda2de88a8d7c5f825e6a106726b73772dffebf77242c764e721cb1 |
| musl 1.2.6-r2 | MIT | Source archive · Build instructions | 5b4aaefb3dcdcc4106154f0b6ff6ea26142bea2318ebccb5317f8414ca50faa9 |
| musl-crt 1.2.6-r3 | MIT | Source archive · Build instructions | 302c0b882fc023dbf349ea00293b5275593303356b690e013c3ee7f29da93098 |
| ncurses 6.5_p20251123-r0 | X11 | Source archive · Build instructions | f6d9a3d592fc111fb4643da2f57e27c554a9e3798fc9d63d082071c14ce47dd5 |
| numpy 2.2.6 | BSD-3-Clause AND MIT AND Zlib | Source archive · Build instructions | 8bb0b836dba6f9fd987ebfaa008153bf1c922ed2af058d2d2827eae055e63ef1 |
| openssl 3.5.7-r0 | Apache-2.0 | Source archive · Build instructions | 08ee53f72680ec7917deb434b39dd0d62f72ffa0556a1c7fe1d04cb0d2b2b929 |
| oxidevm-default-profile 1.0.6 | Apache-2.0 | Source archive · [Build instructions](https://github.com/spacia-ai/oxidevm-sdk-public... |
v0.0.20
SDK and CLI 0.0.20.
This release updates the engine: translated code leaves a module more cheaply and reads unwritten pages of live files directly.
Cheaper module transitions. Each translated module now leaves through one shared exit path instead of repeating the dispatch work at every exit, and a region's entry loads only the registers its code reads before writing them. In diagnostic measurements of a mobile Python workload in an Android emulator, the first CPU-heavy command ran about 5% faster and peak browser memory was 6–10% lower; a repeated command ran at the same speed.
Direct reads of live file pages. Translated code now reads a private mapping's unwritten file pages directly, for example a library under a writable directory such as /usr/local, instead of taking the slow memory path on every read. Writes and shared mappings keep the slow path, so file and mapping behavior is unchanged.
The engine interfaces are unchanged, and the Python + pandas starter image stays at 0.0.2.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
sdk-materials-v0.0.20
SDK and CLI 0.0.20 license materials.
The licenses.tar.gz bundle includes the actual package notices, SBOMs, and the separately pinned engine terms, notices, and compliance manifest. See SHA256SUMS and CONTENTS.SHA256.
Image source downloads
Image oxidevm-starter-pandas 0.0.2, manifest SHA-256 1323e3059072332eb3c7760105e6a3364a28d79ecb0bbfb275899c54418fd294.
These downloads are supplied under each component's original license.
They require no account or commercial engine license. The image bundle also
contains its corresponding source archives. Published source kits are retained
permanently under the release policy.
- Open-source notice and component index
- Complete license and copyright notices
- Checksums
- SPDX inventory and CycloneDX SBOM
- Complete source and license bundle
- Image source release
| Component | License | Downloads | Source archive SHA-256 |
|---|---|---|---|
| bzip2 1.0.8-r6 | bzip2-1.0.6 | Source archive · Build instructions | 5e82fee5cfcd1a6e7df9c51b65d40d2c363830ac5dd9730d5f83839698139b3b |
| ca-certificates 20260611-r0 | MPL-2.0 AND MIT | Source archive · Build instructions | 47160bc635531bad50181f71f74a49efcd0f57342eac93a78a8f37dad6ef1296 |
| curl 8.23.0 | curl | Source archive · Build instructions | a875f2dab2669e19a87c5259b8fef04fdd62db31846eba653201b19fac578ff2 |
| dash 0.5.13.5 | BSD-3-Clause AND Apache-2.0 | Source archive · Build instructions | e2a7dd1ea5f76fb032ca36681f16cbe3d0354133b88d0aa63f43d60151b466f2 |
| dc 7.0.3 | BSD-2-Clause | Source archive · Build instructions | 390977a43b74fbc0d3407a510b406db843880f5021aaf725d4a8409a687518c2 |
| dropbear 2026.94 | MIT AND BSD-2-Clause AND SSH-short | Source archive · Build instructions | 3f8f2eb0634e65726bcb67b0d1e308018cefc01ba8909a727fb68ccd49d038cd |
| expat 2.9.0-r0 | MIT | Source archive · Build instructions | 0c6f3ebcf78028f540f68e8aec6c8b3568dba0c4e0610078e4b455e1e711cdaa |
| gcc-runtime 15.2.0-r5 | GPL-3.0-or-later WITH GCC-exception-3.1 | Source archive · Build instructions | 5385a0c64d2315e640c2cf18b0371b354b78c79651ba174961471797df21e582 |
| libarchive 3.8.10 | BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 | Source archive · Build instructions | 5595fe3313b314e291da627a2b1d339ef9703baec7fd90b39172e2e2abeff3bd |
| libffi 3.5.2-r0 | MIT | Source archive · Build instructions | 618a71dd4be71ac32e7cb67d0bf10f47902e3ad1ee200154ffe0a578c2c6c54f |
| libtomcrypt dropbear-2026.94 | WTFPL | Source archive · Build instructions | f28e8fa028dcc96e4f77c046622f2d1e916167fcd6f988943ee66081b0bde1d9 |
| libtommath dropbear-2026.94 | Unlicense | Source archive · Build instructions | 64eb59c6084c8a26908f639b97f1a6ca5d69ee27281a52bd38be9a8374456325 |
| mksh 59c-r4 | MirOS AND Unicode-DFS-2016 | Source archive · Build instructions | da3facdf7876b508ae758e94b9fead639c5d0491bb37a3b5890eb77b075c3025 |
| mpdecimal 4.0.1-r0 | BSD-2-Clause | Source archive · Build instructions | 06f196d00fda2de88a8d7c5f825e6a106726b73772dffebf77242c764e721cb1 |
| musl 1.2.6-r2 | MIT | Source archive · Build instructions | 5b4aaefb3dcdcc4106154f0b6ff6ea26142bea2318ebccb5317f8414ca50faa9 |
| musl-crt 1.2.6-r3 | MIT | Source archive · Build instructions | 302c0b882fc023dbf349ea00293b5275593303356b690e013c3ee7f29da93098 |
| ncurses 6.5_p20251123-r0 | X11 | Source archive · Build instructions | f6d9a3d592fc111fb4643da2f57e27c554a9e3798fc9d63d082071c14ce47dd5 |
| numpy 2.2.6 | BSD-3-Clause AND MIT AND Zlib | Source archive · Build instructions | 8bb0b836dba6f9fd987ebfaa008153bf1c922ed2af058d2d2827eae055e63ef1 |
| openssl 3.5.7-r0 | Apache-2.0 | Source archive · Build instructions | 08ee53f72680ec7917deb434b39dd0d62f72ffa0556a1c7fe1d04cb0d2b2b929 |
| oxidevm-default-profile 1.0.6 | Apache-2.0 | Source archive · [Build instructions](https://github.com/spacia-ai/oxidevm-sdk-public... |
v0.0.19
SDK and CLI 0.0.19.
With this release, related processes spend less memory preparing JIT code they share.
Less JIT metadata work. When a child or sibling process binds an executable prefix that the SDK's validator already certified, the SDK now reuses that prefix's static instruction and IR metadata instead of rebuilding it. Each alias still gets fresh validated runtime and binding identities, metadata that is not canonical revokes the shortcut, and an uncertified prefix gets full validation as before. In one diagnostic capture on Android, sampled execution-worker allocations fell by about 42%. That capture was taken on a loaded host, so it is not a qualified latency measurement.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
sdk-materials-v0.0.19
SDK and CLI 0.0.19 license materials.
The licenses.tar.gz bundle includes the actual package notices, SBOMs, and the separately pinned engine terms, notices, and compliance manifest. See SHA256SUMS and CONTENTS.SHA256.
Image source downloads
Image oxidevm-starter-pandas 0.0.2, manifest SHA-256 1323e3059072332eb3c7760105e6a3364a28d79ecb0bbfb275899c54418fd294.
These downloads are supplied under each component's original license.
They require no account or commercial engine license. The image bundle also
contains its corresponding source archives. Published source kits are retained
permanently under the release policy.
- Open-source notice and component index
- Complete license and copyright notices
- Checksums
- SPDX inventory and CycloneDX SBOM
- Complete source and license bundle
- Image source release
| Component | License | Downloads | Source archive SHA-256 |
|---|---|---|---|
| bzip2 1.0.8-r6 | bzip2-1.0.6 | Source archive · Build instructions | 5e82fee5cfcd1a6e7df9c51b65d40d2c363830ac5dd9730d5f83839698139b3b |
| ca-certificates 20260611-r0 | MPL-2.0 AND MIT | Source archive · Build instructions | 47160bc635531bad50181f71f74a49efcd0f57342eac93a78a8f37dad6ef1296 |
| curl 8.23.0 | curl | Source archive · Build instructions | a875f2dab2669e19a87c5259b8fef04fdd62db31846eba653201b19fac578ff2 |
| dash 0.5.13.5 | BSD-3-Clause AND Apache-2.0 | Source archive · Build instructions | e2a7dd1ea5f76fb032ca36681f16cbe3d0354133b88d0aa63f43d60151b466f2 |
| dc 7.0.3 | BSD-2-Clause | Source archive · Build instructions | 390977a43b74fbc0d3407a510b406db843880f5021aaf725d4a8409a687518c2 |
| dropbear 2026.94 | MIT AND BSD-2-Clause AND SSH-short | Source archive · Build instructions | 3f8f2eb0634e65726bcb67b0d1e308018cefc01ba8909a727fb68ccd49d038cd |
| expat 2.9.0-r0 | MIT | Source archive · Build instructions | 0c6f3ebcf78028f540f68e8aec6c8b3568dba0c4e0610078e4b455e1e711cdaa |
| gcc-runtime 15.2.0-r5 | GPL-3.0-or-later WITH GCC-exception-3.1 | Source archive · Build instructions | 5385a0c64d2315e640c2cf18b0371b354b78c79651ba174961471797df21e582 |
| libarchive 3.8.10 | BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 | Source archive · Build instructions | 5595fe3313b314e291da627a2b1d339ef9703baec7fd90b39172e2e2abeff3bd |
| libffi 3.5.2-r0 | MIT | Source archive · Build instructions | 618a71dd4be71ac32e7cb67d0bf10f47902e3ad1ee200154ffe0a578c2c6c54f |
| libtomcrypt dropbear-2026.94 | WTFPL | Source archive · Build instructions | f28e8fa028dcc96e4f77c046622f2d1e916167fcd6f988943ee66081b0bde1d9 |
| libtommath dropbear-2026.94 | Unlicense | Source archive · Build instructions | 64eb59c6084c8a26908f639b97f1a6ca5d69ee27281a52bd38be9a8374456325 |
| mksh 59c-r4 | MirOS AND Unicode-DFS-2016 | Source archive · Build instructions | da3facdf7876b508ae758e94b9fead639c5d0491bb37a3b5890eb77b075c3025 |
| mpdecimal 4.0.1-r0 | BSD-2-Clause | Source archive · Build instructions | 06f196d00fda2de88a8d7c5f825e6a106726b73772dffebf77242c764e721cb1 |
| musl 1.2.6-r2 | MIT | Source archive · Build instructions | 5b4aaefb3dcdcc4106154f0b6ff6ea26142bea2318ebccb5317f8414ca50faa9 |
| musl-crt 1.2.6-r3 | MIT | Source archive · Build instructions | 302c0b882fc023dbf349ea00293b5275593303356b690e013c3ee7f29da93098 |
| ncurses 6.5_p20251123-r0 | X11 | Source archive · Build instructions | f6d9a3d592fc111fb4643da2f57e27c554a9e3798fc9d63d082071c14ce47dd5 |
| numpy 2.2.6 | BSD-3-Clause AND MIT AND Zlib | Source archive · Build instructions | 8bb0b836dba6f9fd987ebfaa008153bf1c922ed2af058d2d2827eae055e63ef1 |
| openssl 3.5.7-r0 | Apache-2.0 | Source archive · Build instructions | 08ee53f72680ec7917deb434b39dd0d62f72ffa0556a1c7fe1d04cb0d2b2b929 |
| oxidevm-default-profile 1.0.6 | Apache-2.0 | Source archive · [Build instructions](https://github.com/spacia-ai/oxidevm-sdk-public... |
v0.0.18
SDK and CLI 0.0.18.
With this release, a cold Userspace start does less one step at a time, and the hosted runtime keeps serving every earlier SDK version within Cloudflare's header-rule limit.
A shorter cold start. The engine's compliance manifest and its four license files now download alongside the engine modules instead of one after another, with every size and SHA-256 check as strict as before. The runtime frame installs its offline shell once its VM is ready, so the shell no longer shares the link with the engine and the image during the start. The control and Userspace workers start while storage initializes. In diagnostic measurements of a cold Userspace start over a 10 Mbit/s link, VM ready moved from about 7.5 s to about 7.2 s.
Engine downloads report progress. onProgress gets one download count with asset: "engine" for the whole engine load, against the sum of the pinned sizes; a load served from the cache reports nothing.
Every released frame stays deployable. run.oxidevm.dev and js.oxidevm.dev keep a frame for every released SDK version, because apps pin their version. Their header rules are now shared between versions (3 rules on run.oxidevm.dev instead of 71, 2 on js.oxidevm.dev instead of 38), and each origin lists its frames at /frames.json. Missing files on js.oxidevm.dev now answer 404 with Cache-Control: no-store, so a browser no longer keeps such a 404 for a year.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
v0.0.17
SDK and CLI 0.0.17.
With this release, a cold start downloads less and waits less: the image builder packs the files a program reads first into the first packs, the Python + pandas starter image is published as 0.0.2 in that layout, and a Userspace start fetches its image manifest once.
Fewer downloads on a cold start. An image delivers its files in 4 MiB packs, and a cold start downloads every pack that holds a file it reads. The image builder used to fill packs in content-hash order, which spread the files a first command reads over many packs. It now packs the paths a recipe lists in its new packFirst option first, in that order, and then every other file by path, so files read together share packs. With the Python + pandas starter, the first python3 run now downloads 2 packs (2.8 MB) instead of 10 (14.7 MB), and import numpy 5 packs instead of all 28. In one diagnostic measurement of a page that runs a short Python program over a 10 Mbit/s link, the program's first output appeared after 16 s instead of 27 s.
Python + pandas starter image 0.0.2. It has exactly the files of 0.0.1 in the new layout and is signed with a new author key, ed25519-d753cdd5739b36c670441766e2c08ea8. New apps use it. The SDK does not boot a workspace saved on an image signed by another key, so the generated starter opens such a workspace again with restorePoint: "update-image", which moves it to 0.0.2 and keeps its files. Apps that move from the 0.0.1 image can do the same or use a new workspaceId.
Fewer waits before a Userspace VM starts. The page fetches and verifies the image manifest while the engine loads, instead of afterwards, and the runtime no longer downloads it a second time; the image's four evidence files download together instead of one after another.
Complete hosted frames for earlier versions. Earlier releases removed files from the hosted runtime frames that older SDK versions pin: the module frame of 0.0.11–0.0.15, the esbuild worker of 0.0.13–0.0.15, the native process workers of 0.0.13–0.0.15 and the license texts of 0.0.2–0.0.15. This release restores them from the files those releases published, so apps pinned to those versions can start WebAssembly modules again, and later releases keep every released frame complete.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
v0.0.16
SDK and CLI 0.0.16.
With this release, programs whose libraries live in writable directories run faster in Userspace, shells find /dev/fd and /dev/stdin, and the hosted runtime frame names the embedding page to relays.
Faster library data in Userspace. Compiled code now reads and writes the pages of a library or program that the process holds its own copy of directly, without calling into the engine. Before, every access to the data of a library loaded from a writable directory, such as /usr/local, where the official Python and Ruby images install their runtimes, went through the engine. In one diagnostic measurement, importing pytest from source in the official python:3.13-alpine image took 82 s instead of 146 s. Pages that no process wrote, such as a library's read-only data, still take the slower path.
/dev links. Userspace /dev has the links runc creates in every container: /dev/fd, /dev/stdin, /dev/stdout, /dev/stderr and a root-owned /dev/ptmx. Bash process substitution, > /dev/stderr and tee >(…) work. Opening a pipe or terminal again through /proc/self/fd with O_CREAT behaves like a plain open, opening a socket file fails with ENXIO, and bind creates socket files with the socket's mode under the umask, as on Linux.
Relay identity in the hosted frame. A VM in the hosted frame presents the workspace <page origin> <workspaceId> to relays, so the personal relay's approval and session list name the page, and a server relay's session route receives that workspace ID. The page's origin and workspaceId together must fit 256 characters, or connect rejects with INVALID_ARGUMENT. The frame sends a server relay's session request and revocation without cookies; a session route that authorized frame-hosted pages by cookie authenticates them with headers instead.
oxidevm doctor checks applications on the hosted runtime frame. DoctorReport has a new required member, hosting, and worker-load and storage report not-applicable for a frame-hosted application. The CLI has --hosting and --frame-origin.
Update the SDK and the CLI together, and restage runtime assets (oxidevm assets install) in self-hosted apps. See the migration notes for the complete list.
Create a Python + pandas app:
npx @oxidevm/cli@latest init app --startOr use Bun:
bunx --package @oxidevm/cli@latest oxidevm init app-bun --use-bun --startSDK, CLI, starter code and the oxidevm-bridge crate use Apache-2.0. The engine and guest programs have separate licenses. See the licensing guide, SDK/engine notices and image sources and licenses.
Experimental release. APIs and saved-state formats can change.
sdk-materials-v0.0.18
SDK and CLI 0.0.18 license materials.
The licenses.tar.gz bundle includes the actual package notices, SBOMs, and the separately pinned engine terms, notices, and compliance manifest. See SHA256SUMS and CONTENTS.SHA256.
Image source downloads
Image oxidevm-starter-pandas 0.0.2, manifest SHA-256 1323e3059072332eb3c7760105e6a3364a28d79ecb0bbfb275899c54418fd294.
These downloads are supplied under each component's original license.
They require no account or commercial engine license. The image bundle also
contains its corresponding source archives. Published source kits are retained
permanently under the release policy.
- Open-source notice and component index
- Complete license and copyright notices
- Checksums
- SPDX inventory and CycloneDX SBOM
- Complete source and license bundle
- Image source release
| Component | License | Downloads | Source archive SHA-256 |
|---|---|---|---|
| bzip2 1.0.8-r6 | bzip2-1.0.6 | Source archive · Build instructions | 5e82fee5cfcd1a6e7df9c51b65d40d2c363830ac5dd9730d5f83839698139b3b |
| ca-certificates 20260611-r0 | MPL-2.0 AND MIT | Source archive · Build instructions | 47160bc635531bad50181f71f74a49efcd0f57342eac93a78a8f37dad6ef1296 |
| curl 8.23.0 | curl | Source archive · Build instructions | a875f2dab2669e19a87c5259b8fef04fdd62db31846eba653201b19fac578ff2 |
| dash 0.5.13.5 | BSD-3-Clause AND Apache-2.0 | Source archive · Build instructions | e2a7dd1ea5f76fb032ca36681f16cbe3d0354133b88d0aa63f43d60151b466f2 |
| dc 7.0.3 | BSD-2-Clause | Source archive · Build instructions | 390977a43b74fbc0d3407a510b406db843880f5021aaf725d4a8409a687518c2 |
| dropbear 2026.94 | MIT AND BSD-2-Clause AND SSH-short | Source archive · Build instructions | 3f8f2eb0634e65726bcb67b0d1e308018cefc01ba8909a727fb68ccd49d038cd |
| expat 2.9.0-r0 | MIT | Source archive · Build instructions | 0c6f3ebcf78028f540f68e8aec6c8b3568dba0c4e0610078e4b455e1e711cdaa |
| gcc-runtime 15.2.0-r5 | GPL-3.0-or-later WITH GCC-exception-3.1 | Source archive · Build instructions | 5385a0c64d2315e640c2cf18b0371b354b78c79651ba174961471797df21e582 |
| libarchive 3.8.10 | BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 | Source archive · Build instructions | 5595fe3313b314e291da627a2b1d339ef9703baec7fd90b39172e2e2abeff3bd |
| libffi 3.5.2-r0 | MIT | Source archive · Build instructions | 618a71dd4be71ac32e7cb67d0bf10f47902e3ad1ee200154ffe0a578c2c6c54f |
| libtomcrypt dropbear-2026.94 | WTFPL | Source archive · Build instructions | f28e8fa028dcc96e4f77c046622f2d1e916167fcd6f988943ee66081b0bde1d9 |
| libtommath dropbear-2026.94 | Unlicense | Source archive · Build instructions | 64eb59c6084c8a26908f639b97f1a6ca5d69ee27281a52bd38be9a8374456325 |
| mksh 59c-r4 | MirOS AND Unicode-DFS-2016 | Source archive · Build instructions | da3facdf7876b508ae758e94b9fead639c5d0491bb37a3b5890eb77b075c3025 |
| mpdecimal 4.0.1-r0 | BSD-2-Clause | Source archive · Build instructions | 06f196d00fda2de88a8d7c5f825e6a106726b73772dffebf77242c764e721cb1 |
| musl 1.2.6-r2 | MIT | Source archive · Build instructions | 5b4aaefb3dcdcc4106154f0b6ff6ea26142bea2318ebccb5317f8414ca50faa9 |
| musl-crt 1.2.6-r3 | MIT | Source archive · Build instructions | 302c0b882fc023dbf349ea00293b5275593303356b690e013c3ee7f29da93098 |
| ncurses 6.5_p20251123-r0 | X11 | Source archive · Build instructions | f6d9a3d592fc111fb4643da2f57e27c554a9e3798fc9d63d082071c14ce47dd5 |
| numpy 2.2.6 | BSD-3-Clause AND MIT AND Zlib | Source archive · Build instructions | 8bb0b836dba6f9fd987ebfaa008153bf1c922ed2af058d2d2827eae055e63ef1 |
| openssl 3.5.7-r0 | Apache-2.0 | Source archive · Build instructions | 08ee53f72680ec7917deb434b39dd0d62f72ffa0556a1c7fe1d04cb0d2b2b929 |
| oxidevm-default-profile 1.0.6 | Apache-2.0 | Source archive · [Build instructions](https://github.com/spacia-ai/oxidevm-sdk-public... |