Nix has flakes; nix run can contain pretty much all of the needed dependencies. If that's not enough, you can set up an entire container as a module.