anchor.diff:    passthru = {
       srcVerification = fetchurl rec {
         failEarly = true;
  -      urls = tarballUrls "0.23.14";
  +      urls = tarballUrls "0.23.15";
         fullOpts = {
           pgpsigUrls = map (n: "${n}.sig") urls;
           pgpKeyFingerprints = [
  
positive.code:   src = fetchurl {
      urls = tarballUrls version;
      hashOutput = false;
      sha256 = "1cb9fa6d237539f25f62f4c3d4ec71a1c8e0772957ec45ec5af92134129e0d70";
    };
  
    buildInputs = [
  
negative.code: }:
  
  let
    version = "0.23.15";
  
    tarballUrls = version: [
      "https://github.com/p11-glue/p11-kit/releases/download/${version}/p11-kit-${version}.tar.gz"
  