anchor.diff:    # See here: https://github.com/dpgaspar/Flask-AppBuilder/commit/7097a7b133f27c78d2b54d2a46e4a4c24478a066.patch
     #           https://github.com/dpgaspar/Flask-AppBuilder/pull/1610
     # The patch from the PR doesn't apply cleanly so I edited it manually.
  -  patches = [ ./upgrade-to-flask_jwt_extended-4.patch ];
  +  patches = [
  +    ./upgrade-to-flask_jwt_extended-4.patch
  +    (fetchpatch {
  +      # https://github.com/dpgaspar/Flask-AppBuilder/pull/1734
  +      name = "flask-appbuilder-wtf3.patch";
  +      url = "https://github.com/dpgaspar/Flask-AppBuilder/commit/bccb3d719cd3ceb872fe74a9ab304d74664fbf43.patch";
  +      sha256 = "1rsci0ynb7y6k53j164faggjr2g6l5v78w7953qbxcy8f55sb2fv";
  +      excludes = [
  +        "requirements.txt"
  +        "setup.py"
  +        "examples/employees/app/views.py"
  +      ];
  +    })
  +  ];
   
     propagatedBuildInputs = [
       apispec
  
positive.code:       --replace "Flask-Login>=0.3, <0.5" "Flask-Login >=0.3, <0.6" \
        --replace "Flask-Babel>=1, <2" "Flask-Babel >=1, <3" \
        --replace "Flask-WTF>=0.14.2, <0.15.0" "Flask-WTF" \
        --replace "marshmallow-sqlalchemy>=0.22.0, <0.24.0" "marshmallow-sqlalchemy" \
        --replace "Flask-JWT-Extended>=3.18, <4" "Flask-JWT-Extended>=4.1.0" \
        --replace "PyJWT>=1.7.1, <2.0.0" "PyJWT>=2.0.1" \
  
negative.code: { lib
  , buildPythonPackage
  , fetchPypi
  , fetchpatch
  , apispec
  , colorama
  , click
  