Probably at minimum something running in a sandbox like Docker.