NixWrap wraps bubblewrap (oh dear), running it with convenient defaults and offering easy to use command line flags to toggle custom options. An invocation to NixWrap is typically way shorter than the bubblewrap equivalent.

E.g. `npm install` can be wrapped with `wrap -n npm install` to gain network access and write access to the current working directory.