GitHub repo NixPak provides sandboxing for Nix packages. The sandbox configuration uses The NixOS Module System.