Repo NixPak provides sandboxing for Nix packages. The sandbox configuration uses The NixOS Module System.