(ice-9 sandbox) vs. (ice-9 safe)

[Jean Abou Samra]

Hi,

Guile 2.2 has a (ice-9 sandbox) module, documented at

https://www.gnu.org/software/guile/docs/docs-2.2/guile-ref/Sandboxed-Evaluation.html#index-make_002dsandbox_002dmodule

Earlier Guile already had the (ice-9 safe) module, which
provided a somewhat similar facility (which is also richer,
as it allows imposing time and memory limits on execution).

LilyPond currently uses (ice-9 safe) to implement its -dsafe mode.
Is it deprecated? Should we move to (ice-9 sandbox)? Is there anything
particular to be aware of in that transition that explains why (ice-9 safe)
remains around?

Thanks,
Jean