Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 5 days ago, with 108 contributors on GitHub.
Peaked at #54 in the weekly ranking the week of Apr 5, its best in the past year.
Use Cases & Benefits
- Provides a kernel-enforced sandbox runtime for AI agents ensuring zero trust, zero setup, and zero latency security.
- Delivers irreversible OS-level capability restrictions with no hypervisor or container overhead, preventing policy bypass and prompt injection attacks.
- Use for securely running AI coding agents with minimal audited permissions and built-in profiles like Claude Code and Codex.
- Use for embedding a policy-free sandbox library into applications via Rust, Python, or TypeScript bindings to enforce strict runtime security.
- Use for supply chain security by cryptographically signing and verifying AI agent instruction files and scripts with Sigstore integration.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
AI agent security that makes the dangerous bits structurally impossible.
From the creator of Sigstore
The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central
AI agents get filesystem access, run shell commands, and are wide open to prompt injections. The standard response is guardrails and policies. The problem is that policies can be bypassed — and guardrails can be talked out of.
With nono, you don't have to. nono wraps your agent in a kernel-isolated sandbox in seconds — with API key protection, destructive action guardrails, and full snapshot/rollback built in. No hypervisor to configure. No container volume mounts. Zero latency overhead.
Platform support: macOS and Linux now. Windows coming soon.
Prebuilt binaries and package manager instructions are in the Installation Guide.
The CLI is the quickest way to get going! zero startup latency, no need to install hypervisors, runtimes, mount volumes...sandboxed and protected in a single command
Built-in profiles for Claude Code, Codex, OpenCode, OpenClaw, and Swival — or define your own with custom permissions.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
+1,185 stars over 83 days across 11 snapshot days; best day +17 on Aug 19.
Forks
327+87
Open issues
293+155
Compared with peers in AI Agents
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| vercel-labs/agent-desktop | 17.0K | +13.3K | 33 | today |
| thedotmack/claude-mem | 113.6K | +8.8K | 35 | today |
| stablyai/orca | 116.8K | +6.6K | 40 | today |
| milind-soni/OpenMausBot | 13.5K | +6.0K | 45 | today |
| HKUDS/DeepTutor | 55.5K | +5.5K | 65 | 5 days ago |
| nolabs-ai/nono | 4.8K | — | 65 | 5 days ago |
| Category median | 55.5K | +6.6K | 40 | — |
Discover Repositories
Search across tracked repositories by name or description