The Open Source Drop #1: Agent sandboxes, semantic diffs, and a database TUI you'll actually enjoy
Welcome to The Open Source Drop, a free, no-BS look at open source tools worth knowing about. Every issue: a few tools we've actually researched, with honest analysis of what they do well and where they fall short. No sponsored picks. No hype.
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
The Lens
Goose does that. Built by Block (the company behind Square and Cash App), it's a local AI agent that uses any LLM you point it at and has full access to your development environment. The key differentiator: extensibility. Goose uses a plugin system where you can add capabilities, called 'toolkits', for specific tasks. Need it to manage your Kubernetes cluster? Deploy to AWS? Run your CI pipeline? Add the toolkit. It's designed to be the agent framework that grows with your workflow. Apache 2.0. Backed by a major tech company, not a weekend project. The catch: Goose needs an LLM, and the quality of its work depends entirely on which model you use. With Claude or GPT-4, it's impressive. With smaller local models, it struggles on complex tasks. Also: giving an AI agent full access to your terminal is powerful but risky. Always review what it's doing, especially with destructive commands.
Sandboxes for every agent — embeddable, stateful, with snapshots and hardware isolation.
The Lens
Boxlite gives you lightweight sandboxes. Each sandbox is a stateful micro-VM with hardware isolation, snapshots, and an API to control it. Picture giving every AI agent its own disposable computer. The project is open source under Apache 2.0 and self-hosting is free. It's early but growing fast. The 'agent sandboxing' space is heating up as AI agents get more autonomous and need safer execution environments. The catch: this is emerging technology. The documentation and ecosystem are still maturing. Running Firecracker-based micro-VMs requires Linux with KVM support. No macOS, no Windows natively. And the question of whether you need full VM isolation versus Docker containers depends on your threat model. For most use cases, Docker is simpler. Boxlite is for when you can't trust the code being executed.
Semantic version control CLI — entity-level diff, blame, graph, and impact analysis for code across 21 languages.
The Lens
' sem fixes that. Instead of line-by-line diffs, it gives you entity-level diffs: which functions changed, which classes were renamed, which dependencies shifted. Consider it version control that understands code structure, not just text. It supports 21 languages, runs as a CLI, and adds blame, graph, and impact analysis on top of the structural diff. The impact analysis is the real selling point: change a function and sem tells you what else in your codebase is affected. Written in Rust, Apache 2.0, fully free. No paid tier, no cloud, no account. Install the CLI and go. The catch: nascent stage. The concept is excellent but the ecosystem is tiny. If your language isn't in the 21 supported, you're out of luck. And at this star count, expect rough edges and sparse docs.
A user-friendly TUI for SQL databases — supports SQL Server, MySQL, PostgreSQL, SQLite, and more.
The Lens
SQLite, and more. It's essentially a lightweight database GUI that runs in your terminal window: no browser, no Electron app, just your keyboard and your data. and. MIT licensed, Python. The interface lets you browse tables, run queries, view results in a formatted table, and switch between databases. It supports multiple database backends through a unified interface, which is useful if you work with different databases across projects. Completely free. No paid tier, no hosted version. Install via pip and connect to your databases. Solo: great for quick database checks without opening a heavy GUI. Small teams: useful for developers who live in the terminal and want fast data access. Medium to large: this is a personal productivity tool, not a team collaboration platform. For shared database management, look at DBeaver or a web-based tool. The catch: it's early-stage, with high velocity means it's catching attention, but the feature set is thin compared to mature tools like DBeaver or DataGrip. No saved queries, no ER diagrams, no data export wizards. It's a browser, not a workbench. If you need advanced features, this won't replace your existing tool, but for quick terminal queries, it's clean and fast.
Get the next issue in your inbox
Free. No spam. Unsubscribe anytime.