Coldbrew is a “brew” style package manager for Linux distributions that offers the full power of the Alpine Linux aports repository with no root access required
Coldbrew is a bit of a mix of flatpak and homebrew. It uses a very lightweight sandbox (bubblewrap) mainly as a means of isolating dependencies. It aims to server a similar goal as homebrew, but without the PATH issues homebrew brings (see: https://invent.kde.org/kde-linux/kde-linux/-/merge_requests/408)
Example Usage:
coldbrew install neovim # install the package
coldbrew run nvim # run nvim
coldbrew wrap nvim # create a wrapper to type less
nvim # run nvim



Correct, that’s what I meant by calling it a lightweight sandbox that’s mainly used to isolate dependencies.
Though the cool thing about cold brew is that it’s simply a shell script. Not even a crazy long one at that. It would not be difficult to modify the bubblewrap flags to increase security.
Though filesystem isolation is not its goal, it’s meant to emulate that homebrew use which is unsandboxed.