anchor.diff:  
     buildInputs = [ bash
                     curl
  +                  dnsutils
                     gawk
  -                  host.dnsutils
                     jq
                     netcat ];
   
     installPhase = ''
  +    runHook preInstall
  +
       install -Dm 0755 twa "$out/bin/twa"
       install -Dm 0755 tscore "$out/bin/tscore"
       install -Dm 0644 twa.1 "$out/share/man/man1/twa.1"
  
positive.code: { stdenv
  , bash
  , curl
  , fetchFromGitHub
  , gawk
  , host
  , jq
  , lib
  , makeWrapper
  , ncurses
  , netcat
  }:
  
  stdenv.mkDerivation rec {
    pname = "twa";
    version = "1.9.1";
  
    src = fetchFromGitHub {
      owner = "trailofbits";
      repo = "twa";
      rev = version;
      sha256 = "1ab3bcyhfach9y15w8ffvqqan2qk8h62n6z8nqbgygi7n1mf6jzx";
    };
  
    dontBuild = true;
  
negative.code: 
      wrapProgram "$out/bin/twa" \
        --prefix PATH : ${lib.makeBinPath [ curl
                                            dnsutils
                                            gawk
                                            jq
                                            ncurses
                                            netcat ]}
  
      runHook postInstall
    '';
  
    meta = with lib; {
  