nono

license

Apache-2.0(OSI)

source

public(full Rust implementation, self-hostable)

distribution

curl / Homebrew / Debian-Ubuntu-Fedora-Arch-RHEL-openSUSE-Nix + FFI bindings (nono-py, nono-ts, nono-go)

service

none(standalone CLI/library, no proprietary backend)

core-gated

ungated

Fully open source: an Apache-2.0 Rust implementation that is self-hostable as a standalone CLI or library with no proprietary service tier. A clean contrast with the managed sandbox clouds (Vercel, Cloudflare, Modal), which publish only a client SDK over a closed runtime. The registry namespace has moved from always-further to nolabs-ai, which is a rename rather than a gate.

• https://raw.githubusercontent.com/nolabs-ai/nono/main/LICENSE recorded 2026-08-13

  Verbatim Apache License 2.0 body at repository head

• https://api.github.com/repos/nolabs-ai/nono recorded 2026-08-13

  Repository metadata - nolabs-ai/nono, language Rust, license spdx_id Apache-2.0, public and not archived, 3,644 stars, 241 forks, last push 2026-08-13

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-08-13

  Install with curl or Homebrew, with Debian/Ubuntu, Fedora, Arch, RHEL, openSUSE, WSL2 and Nix linked; the profile system, brokered tool sandboxes, credential proxy and L7 endpoint filtering are documented as ordinary features; FFI bindings for Rust, Python, TypeScript and Go published as nono-py, nono-ts and nono-go; registry namespace migrated from always-further to nolabs-ai; the License section reads Apache-2.0. No paid tier, license key or hosted dependency is described.

3,644 GitHub stars and 241 forks on the one declared repo, which falls in the 1K-10K star band. Stars are the only public proxy: the README publishes no download, install or user figure, and the closest thing to a usage claim is unattributed marketing prose about engineers at large companies running nono in production, which is not something a level can be read from. A star is not a download, so a star-based reading is capped and describes attention rather than volume - read here as early but real traction for a recent release rather than as scaled adoption, notwithstanding the multi-platform packages and FFI bindings. The source below is the repository metadata endpoint, whose contents move whenever the count does; that is what a star signal does, and it does not weaken a band resting on order of magnitude.

• https://api.github.com/repos/nolabs-ai/nono recorded 2026-08-13

  Repository metadata - stargazers_count 3,644 and forks_count 241 for nolabs-ai/nono, public and not archived, last push 2026-08-13

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-08-13

  No download, install or user count is published; the only traction language is unattributed prose about engineers at large companies using nono in production, with no named adopter

Solid, cross-platform sandbox with very low setup friction; scored mid-range for the category - below the heavier microVM and OS-isolation options on hard isolation depth, but broad and easy to adopt locally. The mechanism is OS-level allow-lists rather than a virtual machine - the README says no daemon, no container, no VM and no disk space usage - which is what holds this below the microVM peers. nono.sh leads on kernel-level isolation for Linux, macOS and Windows with zero setup and zero latency, and lists per-language sandboxes for Python, Node.js and Go. The feature surface is wider than isolation depth alone suggests, with brokered per-tool child sandboxes, credential proxying with L7 endpoint policy, hash-chained audit records under a SHA-256 Merkle root, rollback and Sigstore provenance: real depth in a different direction from hard isolation, and not a reason to move the score.

• https://nono.sh recorded 2026-08-13

  Kernel isolation for Linux, macOS and Windows; ephemeral micro sandboxes with zero setup and zero latency; per-language OS/Python/Node.js/Go sandboxes; brokered tool execution with scoped credentials and L7 endpoint policy; hash-chained audit log sealed with a SHA-256 Merkle root; undo/rollback snapshots; Sigstore provenance; registry linked

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-08-13

  "no daemon, no container, no VM, and no disk space usage" with a least-privilege sandbox enforced out of the box on macOS, Linux and Windows (WSL2); FFI bindings for Rust, Python, TypeScript and Go; profiles pulled from the nono registry and composable as JSON