anchor.diff:        --replace "colorama>=0.2.5,<0.4.4" "colorama" \
         --replace "cryptography>=3.3.2,<37.0.0" "cryptography" \
         --replace "docutils>=0.10,<0.16" "docutils" \
  -      --replace "ruamel.yaml>=0.15.0,<0.16.0" "ruamel.yaml" \
  +      --replace "ruamel.yaml>=0.15.0,<=0.17.21" "ruamel.yaml" \
         --replace "wcwidth<0.2.0" "wcwidth" \
         --replace "prompt-toolkit>=3.0.24,<3.0.29" "prompt-toolkit~=3.0" \
         --replace "distro>=1.5.0,<1.6.0" "distro"
  
positive.code:   py = python3.override {
      packageOverrides = self: super: {
        awscrt = super.awscrt.overridePythonAttrs (oldAttrs: rec {
          version = "0.13.11";
          src = self.fetchPypi {
            inherit (oldAttrs) pname;
            inherit version;
            sha256 = "sha256-Yx3I3RD57Nx6Cvm4moc5zmMbdsHeYiMghDfbQUor38E=";
          };
        });
      };
  
negative.code: in
  with py.pkgs; buildPythonApplication rec {
    pname = "awscli2";
    version = "2.7.33"; # N.B: if you change this, check if overrides are still up-to-date
  
    src = fetchFromGitHub {
      owner = "aws";
      repo = "aws-cli";
      rev = version;
      sha256 = "sha256-9X056Xc9DPp8BiuAeCvQrswcj7mnZKrkMOad5aP1TI8=";
    };
  
    propagatedBuildInputs = [
  