A corral for unbroken horses. corral wraps Lima to give every project its own agent VM — real kernel boundary, persistent per-workspace memory, full dev toolchain inside, no host home or SSH agent visible. Optional HAProxy + pf egress filter restricts outbound HTTPS to a per-workspace allowlist. Rootless containerd ships in every VM. macOS, Apple Silicon or Intel.
⚠ The trust score below reflects the collection's repository only. The bundled units are not individually verified or scanned — review them before use.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
The repository archive could not be read at scan time (tarball fetch returned 406), so no tool declarations could be extracted from it. Nothing here is a statement about what this exposes.
A corral for unbroken horses. corral wraps Lima to give every project its own agent VM — real kernel boundary, persistent per-workspace memory, full dev toolchain inside, no host home or SSH agent visible. Optional HAProxy + pf egress filter restricts outbound HTTPS to a per-workspace allowlist. Rootless containerd ships in every VM. macOS, Apple Silicon or Intel.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.