Cloudflare

license

Proprietary

source

closed

service

proprietary Cloudflare edge (Workers/Durable Objects/Dynamic Worker Loader - no self-host of the isolate/container plane)

open-part

Sandbox SDK only (@cloudflare/sandbox Apache-2.0, cloudflare/sandbox-sdk on GitHub)

pricing

Workers paid plan, Dynamic Workers $0.002/unique-worker/day

Closed managed service. The Sandbox SDK is Apache-2.0, but execution requires Cloudflare’s proprietary managed edge network, with no way to self-host the isolate or container plane; an open client SDK over a closed runtime is not open core. One classification wrinkle is worth recording: GitHub reports cloudflare/sandbox-sdk as NOASSERTION because the root LICENSE file is a one-line pointer to packages/sandbox/LICENSE, and that file is the verbatim Apache License 2.0 - the SDK is Apache-2.0 as recorded, and the classifier is simply defeated by the redirect.

• https://github.com/cloudflare/sandbox-sdk recorded 2026-06-04

  Apache-2.0 SDK; runs on Cloudflare Containers/Workers/Durable Objects (managed edge)

• https://blog.cloudflare.com/dynamic-workers/ recorded 2026-06-04

  Dynamic Worker Loader open beta, isolate sandboxing, post-beta $0.002/worker/day pricing

• https://blog.cloudflare.com/dynamic-workers/ recorded 2026-08-13

  Dynamic Worker Loader is an API by which a Cloudflare Worker instantiates another Worker in its own sandbox, running on Cloudflare's platform; open beta to all paid Workers users; priced at $0.002 per unique Worker loaded per day on top of normal Workers CPU and invocation charges. No self-hosted deployment of the isolate or container plane is offered.

• https://api.github.com/repos/cloudflare/sandbox-sdk recorded 2026-08-13

  Repository public and unarchived, described as "Run sandboxed code environments on Cloudflare's edge network"; license reported as NOASSERTION because the root LICENSE is a pointer file.

• https://raw.githubusercontent.com/cloudflare/sandbox-sdk/main/packages/sandbox/LICENSE recorded 2026-08-13

  The verbatim Apache License 2.0 body, governing the published SDK package that the root LICENSE pointer names.