nono

license

Apache-2.0(OSI)

source

public(full Rust implementation, self-hostable)

distribution

curl / Homebrew / Debian-Ubuntu-Fedora-Arch-RHEL-openSUSE-Nix + FFI bindings (nono-py, nono-ts, nono-go)

service

none(standalone CLI/library, no proprietary backend)

core features withheld

no

nono is fully open source: an Apache-2.0 Rust implementation that is self-hostable as a standalone CLI or library, with no proprietary service tier.

• https://api.github.com/repos/nolabs-ai/nono recorded 2026-08-13

  Repository metadata - nolabs-ai/nono, language Rust, license spdx_id Apache-2.0, public and not archived, 3,644 stars, 241 forks, last push 2026-08-13

• https://raw.githubusercontent.com/nolabs-ai/nono/main/LICENSE recorded 2026-09-29

  Full Apache License text, headed "Apache License" and "Version 2.0, January 2004", with "TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION" at repository head.

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-09-29

  README documents building from source, "The project provides a Nix flake with two outputs" including "builds from source using" buildRustPackage, and a License section reading "Apache-2.0". Searched for enterprise, license key, commercial, paid, pricing and cloud-only: none.

GitHub stars are the only public adoption signal for nono: the README publishes no download, install or user figure, and its claim that engineers at large companies run it in production names no adopter. A star is not a use, so this reads as early attention rather than confirmed adoption, notwithstanding the project's multi-platform packages and FFI bindings.

• https://api.github.com/repos/nolabs-ai/nono recorded 2026-08-13

  Repository metadata - stargazers_count 3,644 and forks_count 241 for nolabs-ai/nono, public and not archived, last push 2026-08-13

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-08-13

  No download, install or user count is published; the only traction language is unattributed prose about engineers at large companies using nono in production, with no named adopter

nono enforces least-privilege sandboxing through OS-level kernel allow-lists across Linux, macOS and Windows, giving each tool its own child sandbox with credential proxying, an audit log and signed provenance. Because the mechanism is an allow-list rather than a virtual machine, its isolation is lighter than the microVM-based sandboxes above it, though setup is close to instant.

• https://nono.sh recorded 2026-09-29

  Homepage lists "Kernel isolation for Linux, macOS" and Windows and states "Security-relevant events are hash-chained into an audit record sealed with a SHA-256 Merkle root, and the sandbox is destroyed when the invocation exits."

• https://raw.githubusercontent.com/nolabs-ai/nono/main/README.md recorded 2026-09-29

  README states "no daemon, no container, no VM, and no disk space usage" and "Out of the box, nono enforces a least-privilege sandbox and supports macOS, Linux, and Windows (WSL2)"; nono can put delegated tools in "their own isolated command sandboxes" with credentials via "nono's credential proxy" and "L7 filtering"; provides "FFI bindings for Rust, Python, TypeScript, and Go"; profiles are pulled from registry.nono.sh.