diff --git a/pkgs/by-name/sh/sherpa-onnx/espeak.patch b/pkgs/by-name/sh/sherpa-onnx/espeak.patch
new file mode 100644
index 000000000000..32ab4c2701d2
--- /dev/null
+++ b/pkgs/by-name/sh/sherpa-onnx/espeak.patch
@@ -0,0 +1,18 @@
+diff --git a/cmake/espeak-ng-for-piper.cmake b/cmake/espeak-ng-for-piper.cmake
+index b54a0a6..3576360 100644
+--- a/cmake/espeak-ng-for-piper.cmake
++++ b/cmake/espeak-ng-for-piper.cmake
+@@ -108,11 +108,13 @@ function(download_espeak_ng_for_piper)
+       -Wno-format-truncation
+       -Wno-uninitialized
+       -Wno-format
++      -Wno-error=format-security
+     )
+
+     if(TARGET espeak-ng-bin)
+       target_compile_options(espeak-ng-bin PRIVATE
+         -Wno-unused-result
++        -Wno-error=format-security
+       )
+     endif()
+   endif()
diff --git a/pkgs/by-name/sh/sherpa-onnx/package.nix b/pkgs/by-name/sh/sherpa-onnx/package.nix
new file mode 100644
index 000000000000..c2b83cd8ad23
--- /dev/null
+++ b/pkgs/by-name/sh/sherpa-onnx/package.nix
@@ -0,0 +1,225 @@
+{
+  lib,
+  config,
+  stdenv,
+  fetchFromGitHub,
+  fetchurl,
+  cmake,
+  python3Packages ? { },
+  nix-update-script,
+
+  # dependencies
+  alsa-lib,
+  eigen,
+  gtest,
+  nlohmann_json,
+  onnxruntime,
+
+  # optional features
+  cudaSupport ? config.cudaSupport,
+  websocketSupport ? true,
+  pythonSupport ? true,
+
+}:
+
+let
+  # Pre-fetched dependencies for cmake FetchContent.
+  # These are copied into the source tree so cmake finds them locally
+  # instead of trying to download them (which fails in the sandbox).
+  cache = [
+    {
+      name = "espeak-ng-f6fed6c58b5e0998b8e68c6610125e2d07d595a7.zip";
+      src = fetchurl {
+        url = "https://github.com/csukuangfj/espeak-ng/archive/f6fed6c58b5e0998b8e68c6610125e2d07d595a7.zip";
+        hash = "sha256-cMv0BQ56AUquGRQLBeVySdpHIPVhKEWfvjqTvq+XGuY=";
+      };
+    }
+    {
+      name = "kaldi-native-fbank-1.22.3.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/csukuangfj/kaldi-native-fbank/archive/refs/tags/v1.22.3.tar.gz";
+        hash = "sha256-kXbMZvx84e34XPNVsG4yDFfbYpffdCd/V1GDRoiTz2E=";
+      };
+    }
+    {
+      name = "simple-sentencepiece-0.7.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/pkufool/simple-sentencepiece/archive/refs/tags/v0.7.tar.gz";
+        hash = "sha256-F0ioIgYKNbqp9mCfhO/I61TcDnS57OPYI2e3EZ/cda8=";
+      };
+    }
+    {
+      name = "kaldifst-1.7.17.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/k2-fsa/kaldifst/archive/refs/tags/v1.7.17.tar.gz";
+        hash = "sha256-xLcBojpAC9qAMlhrAsfg1egTp2WDLfYMI+bfnmKwEPQ=";
+      };
+    }
+    {
+      name = "kaldi-decoder-0.2.11.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/k2-fsa/kaldi-decoder/archive/refs/tags/v0.2.11.tar.gz";
+        hash = "sha256-hcpGJTVZJUHrW6bSGEMAnPNHOPUbKLcfhIgqNpS1KL8=";
+      };
+    }
+    {
+      name = "cargs-1.0.3.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/likle/cargs/archive/refs/tags/v1.0.3.tar.gz";
+        hash = "sha256-3bolvTXpxsdbxwbBJgAbjOjghNQO83BQ5qppY+g264s=";
+      };
+    }
+    {
+      name = "piper-phonemize-78a788e0b719013401572d70fef372e77bff8e43.zip";
+      src = fetchurl {
+        url = "https://github.com/csukuangfj/piper-phonemize/archive/78a788e0b719013401572d70fef372e77bff8e43.zip";
+        hash = "sha256-iWQaRkiaSJh1RkPOV72pybVLTKRkhf3AK/DchLhmZF0=";
+      };
+    }
+    {
+      name = "openfst-sherpa-onnx-2024-06-19.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/csukuangfj/openfst/archive/refs/tags/sherpa-onnx-2024-06-19.tar.gz";
+        hash = "sha256-XJjoLMUJxWGFAt3khguOoE2EOFDtV+bWtZC2RLJohT0=";
+      };
+    }
+    {
+      name = "hclust-cpp-2024-09-29.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/csukuangfj/hclust-cpp/archive/refs/tags/2024-09-29.tar.gz";
+        hash = "sha256-q6tRRIo8tUJyquB1IpcDBuCyzGR51Z17Geeu5NbO3TM=";
+      };
+    }
+    {
+      name = "kissfft-febd4caeed32e33ad8b2e0bb5ea77542c40f18ec.zip";
+      src = fetchurl {
+        url = "https://github.com/mborgerding/kissfft/archive/febd4caeed32e33ad8b2e0bb5ea77542c40f18ec.zip";
+        hash = "sha256-SXED5mQWjr45WAt1etvmFvbPhaFlcq9YHKe8QtCrE/0=";
+      };
+    }
+  ]
+  ++ lib.optionals websocketSupport [
+    {
+      name = "asio-asio-1-24-0.tar.gz";
+      src = fetchurl {
+        url = "https://github.com/chriskohlhoff/asio/archive/refs/tags/asio-1-24-0.tar.gz";
+        hash = "sha256-y8qroPZnInh7Gnwzr+G++zoBK1rzrX2n/w9rjJt6ils=";
+      };
+    }
+    {
+      name = "websocketpp-b9aeec6eaf3d5610503439b4fae3581d9aff08e8.zip";
+      src = fetchurl {
+        url = "https://github.com/zaphoyd/websocketpp/archive/b9aeec6eaf3d5610503439b4fae3581d9aff08e8.zip";
+        hash = "sha256-E4UTXt6Bkaf7757ICZ48Wmc9SN8MFDlYIWzRaQVn9YM=";
+      };
+    }
+  ];
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "sherpa-onnx";
+  version = "1.12.25";
+
+  src = fetchFromGitHub {
+    owner = "k2-fsa";
+    repo = "sherpa-onnx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-NRiqk/YMk3vhlBRrmeMsJ544Xv1b7GCSMQD2ec+xi+k=";
+  };
+
+  outputs = [ "out" ] ++ lib.optionals pythonSupport [ "python" ];
+
+  separateDebugInfo = true;
+
+  patches = [
+    ./espeak.patch
+  ];
+
+  nativeBuildInputs = [
+    cmake
+  ]
+  ++ lib.optionals pythonSupport (
+    with python3Packages;
+    [
+      python
+    ]
+  );
+
+  buildInputs = [
+    onnxruntime
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
+  ];
+
+  nativeCheckInputs = lib.optionals pythonSupport (
+    with python3Packages;
+    [
+      numpy
+      soundfile
+    ]
+  );
+
+  # Populate pre-fetched dependencies so cmake FetchContent finds them
+  # locally instead of attempting network downloads.
+  preConfigure = ''
+    ${lib.concatMapStringsSep "\n" (s: "cp ${s.src} ./${s.name}") cache}
+  '';
+
+  cmakeFlags = [
+    (lib.cmakeBool "FETCHCONTENT_QUIET" false)
+    (lib.cmakeBool "BUILD_SHARED_LIBS" true)
+    (lib.cmakeBool "SHERPA_ONNX_ENABLE_WEBSOCKET" websocketSupport)
+    (lib.cmakeBool "SHERPA_ONNX_ENABLE_PORTAUDIO" false)
+    (lib.cmakeBool "SHERPA_ONNX_ENABLE_PYTHON" pythonSupport)
+    (lib.cmakeBool "SHERPA_ONNX_BUILD_C_API_EXAMPLES" false)
+    (lib.cmakeBool "SHERPA_ONNX_ENABLE_TESTS" true)
+    (lib.cmakeFeature "onnxruntime_SOURCE_DIR" "${onnxruntime.dev}")
+    (lib.cmakeBool "SHERPA_ONNX_ENABLE_GPU" cudaSupport)
+    # Use nixpkgs sources instead of vendored downloads where possible.
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_JSON" "${nlohmann_json.src}")
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_EIGEN" "${eigen.src}")
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_GOOGLETEST" "${gtest.src}")
+    "-Wno-dev"
+  ]
+  ++ lib.optionals pythonSupport [
+    (lib.cmakeFeature "PYTHON_EXECUTABLE" (lib.getExe python3Packages.python))
+    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_PYBIND11" "${python3Packages.pybind11.src}")
+  ];
+
+  # Place the native extension alongside the Python source so that both
+  # checkPhase and postInstall can find a complete sherpa_onnx package.
+  # Upstream's __init__.py imports from sherpa_onnx.lib._sherpa_onnx.
+  postBuild = lib.optionalString pythonSupport ''
+    mkdir -p ../sherpa-onnx/python/sherpa_onnx/lib
+    cp lib/_sherpa_onnx*.so ../sherpa-onnx/python/sherpa_onnx/lib/
+  '';
+
+  doCheck = true;
+
+  # Use ctest directly because the default `make check` target includes clang-tidy.
+  checkPhase = ''
+    runHook preCheck
+    ctest --output-on-failure
+    runHook postCheck
+  '';
+
+  postInstall = lib.optionalString pythonSupport ''
+    mkdir -p $python
+    cp -r ../sherpa-onnx/python/sherpa_onnx $python/
+    rm $out/lib/_sherpa_onnx*.so
+  '';
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Speech-to-text, text-to-speech, and speaker recognition using next-gen Kaldi with onnxruntime";
+    homepage = "https://github.com/k2-fsa/sherpa-onnx";
+    changelog = "https://github.com/k2-fsa/sherpa-onnx/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [ jaredmontoya ];
+    mainProgram = "sherpa-onnx";
+  };
+})
diff --git a/pkgs/development/python-modules/sherpa-onnx/default.nix b/pkgs/development/python-modules/sherpa-onnx/default.nix
new file mode 100644
index 000000000000..cc35b5687bb2
--- /dev/null
+++ b/pkgs/development/python-modules/sherpa-onnx/default.nix
@@ -0,0 +1,31 @@
+{
+  buildPythonPackage,
+  sherpa-onnx,
+  numpy,
+  python,
+}:
+
+buildPythonPackage {
+  pname = "sherpa-onnx";
+  inherit (sherpa-onnx) version;
+  pyproject = false;
+
+  src = sherpa-onnx.python;
+
+  dependencies = [ numpy ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/${python.sitePackages}
+    cp -Rv * $out/${python.sitePackages}/
+
+    runHook postInstall
+  '';
+
+  pythonImportsCheck = [ "sherpa_onnx" ];
+
+  meta = removeAttrs sherpa-onnx.meta [ "mainProgram" ] // {
+    description = "Python bindings for sherpa-onnx speech recognition";
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 9a84b34e2e7a..04c28689fb8e 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -17323,6 +17323,13 @@ self: super: with self; {
 
   shellingham = callPackage ../development/python-modules/shellingham { };
 
+  sherpa-onnx = callPackage ../development/python-modules/sherpa-onnx {
+    sherpa-onnx = pkgs.sherpa-onnx.override {
+      python3Packages = self;
+      pythonSupport = true;
+    };
+  };
+
   shiboken2 = toPythonModule (
     callPackage ../development/python-modules/shiboken2 { inherit (pkgs) cmake llvmPackages qt5; }
   );