nvidia-nemo/guardrails

NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.

View on GitHub ↗Jump to charts ↓Open shareable report

Summary Information

Updated 59 minutes ago
Added to GitGenius on September 9th, 2026
Created on April 18th, 2023
Open Issues & Pull Requests: 225 (+0)
GitHub issues: Enabled
Number of forks: 827
Total Stargazers: 7,093 (+0)
Total Subscribers: 43 (+0)

Repository Insights (GitGenius)

Median issue/PR response: 30.5 hours
Mean response time: 34.1 days
90th percentile: 60.9 days
Tracked items: 411

Most active contributors

Sign in to see contributor activity.

How this project is maintained

Around half of the issues opened in the past year never receive a reply. 81% of open issues come from outside the core team, so the backlog reflects real-world use rather than internal planning. Work labelled "documentation" is answered fastest, typically in about 21 hours, while "status: cannot reproduce" waits about 2 weeks. 33% of tracked open issues have had no activity in three months. Only 3% of issues opened in the past year have been closed.

Charts & Analytics

Fetching additional details & charts...

Issue Activity (beta)

Open issues: 137
New in 7 days: 6
Closed in 7 days: 1
Avg open age: 253 days
Stale 30+ days: 101
Stale 90+ days: 61

Recent activity

Opened in 7 days: 5
Closed in 7 days: 0
Comments in 7 days: 0
Events in 7 days: 0

Top labels

  • bug (126)
  • status: needs triage (104)
  • enhancement (99)
  • question (51)
  • status: waiting confirmation (27)
  • documentation (26)
  • status: needs info (22)
  • good first issue (11)

Detailed Description

NVIDIA NeMo Guardrails is a toolkit for adding programmable guardrails to large language model-based conversational applications.

The toolkit addresses the challenge of controlling LLM behavior in production systems. It works by inserting a programmable layer between application code and the language model, allowing developers to define specific constraints and behaviors. These guardrails can prevent the model from discussing unwanted topics, enforce particular response formats, guide conversations along predefined paths, extract structured data, and protect against common vulnerabilities like jailbreaks and prompt injections.

Developers building LLM-based chat applications should consider this tool if they need to enforce safety policies, connect models to external services securely, or implement controlled dialog flows that follow standard operating procedures. The toolkit is particularly suited for applications requiring trustworthiness and security, such as customer support systems or domain-specific assistants where conversation paths and topic restrictions matter. The project provides example implementations and evaluation mechanisms for testing protection against LLM vulnerabilities.

The project maintains active development across both a stable release branch and a development branch tracking the latest changes. Development activity shows consistent engagement with the codebase through regular updates and refinements to the guardrails framework. The project includes comprehensive documentation and technical papers describing the system architecture and evaluation methodology. The toolkit supports multiple Python versions and provides detailed installation and usage guides for developers integrating it into their applications.