anchor.diff: -{ lib, stdenv, fetchurl, fetchpatch, cmake, makeWrapper, minizip, pcsclite, opensc, openssl
  +{ lib, stdenv, fetchurl, fetchpatch, cmake, minizip, pcsclite, opensc, openssl
   , xercesc, xml-security-c, pkg-config, xsd, zlib, xalanc, xxd }:
   
   stdenv.mkDerivation rec {
  
positive.code:     })
    ];
  
    nativeBuildInputs = [ cmake makeWrapper pkg-config xxd ];
  
    buildInputs = [
      minizip pcsclite opensc openssl xercesc
  
negative.code: 
    outputs = [ "out" "lib" "dev" "bin" ];
  
    # libdigidocpp.so's `PKCS11Signer::PKCS11Signer()` dlopen()s "opensc-pkcs11.so"
    # itself, so add OpenSC to its DT_RUNPATH after the fixupPhase shrinked it.
    # https://github.com/open-eid/cmake/pull/35 might be an alternative.
    postFixup = ''
      patchelf --add-rpath ${opensc}/lib/pkcs11 $lib/lib/libdigidocpp.so
    '';
  
    meta = with lib; {
  