anchor.diff:    src = fetchurl {
       url = "${baseUrl}/${name}.tar.gz";
       sha256Url = "${baseUrl}/SHA256SUMS";
  -    sha256 = "91783a570ab953693eb977ce47c501f04c104cec287fa011c91bcc8970d1c564";
  +    sha256 = "021aa936b06f5815474dd5c137f2325b3fe06caa38d9798ca53ec30b537301fa";
     };
   
     buildInputs = [
  
positive.code: 
    patches = [
      (fetchTritonPatch {
        rev = "c19fd3176ad33fc5e0b6c283c31bb07bf189c44a";
        file = "nss/pem-support.patch";
        sha256 = "12d887d26d437e3cb6d257f6dbf002bb1ea5941554ab8cd650845f9e8688f4ea";
      })
      (fetchTritonPatch {
        rev = "c19fd3176ad33fc5e0b6c283c31bb07bf189c44a";
        file = "nss/fix-sharedlib-loading.patch";
        sha256 = "8e18d51b76b1f0e9d074c73dce323976956ffc0fab38c8ae36a77bf95a220380";
      })
      (fetchTritonPatch {
        rev = "c19fd3176ad33fc5e0b6c283c31bb07bf189c44a";
        file = "nss/add-pkgconfig.patch";
        sha256 = "a42cfde4a40b11028527bc8c960327685b231c14dd6e2e1539804ba8b3d4dd5a";
      })
    ];
  
  
negative.code: }:
  
  let
    version = "3.27";
  
    baseUrl = "https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases"
      + "/NSS_${stdenv.lib.replaceStrings ["."] ["_"] version}_RTM/src";
  