anchor.diff:  {stdenv, system, fetchurl, dpkg, openssl, xorg
   , glib, mesa, libpulseaudio, zlib, dbus, fontconfig, freetype
   , gtk2, pango, atk, cairo, gdk_pixbuf, jasper, xkeyboardconfig
  -, makeWrapper , makeDesktopItem, python, pythonPackages, lib}:
  +, makeWrapper , makeDesktopItem, python, pythonPackages, lib
  +, libredirect, lsof}:
   assert system == "i686-linux" || system == "x86_64-linux";
   let
     all_data = (with builtins; fromJSON (readFile ./data.json));
  
positive.code:   data = (with builtins; getAttr (getAttr system system_map) all_data);
  
    baseUrl = http://repo.sinew.in;
    
    # used of both wrappers and libpath
    libPath = lib.makeLibraryPath (with xorg; [
      openssl
  
negative.code:       cp -r opt/Enpass/*  $out
        cp -r usr/* $out
        rm $out/bin/runenpass.sh
        cp $out/bin/EnpassHelper/EnpassHelper{,.untampered}
  
        sed \
        	-i s@/opt/Enpass/bin/runenpass.sh@$out/bin/Enpass@ \
        	$out/share/applications/enpass.desktop
  
        for i in $out/bin/{Enpass,EnpassHelper/EnpassHelper}; do
          patchelf --set-interpreter $(cat $NIX_CC/nix-support/dynamic-linker) $i
        done
  
        # The helper's sha256 sum must match, hence the use of libredirect.
        # Also, lsof must be in the path for proper operation.
        wrapProgram $out/bin/Enpass \
          --set LD_LIBRARY_PATH "${libPath}:$out/lib:$out/plugins/sqldrivers" \
          --set QT_PLUGIN_PATH "$out/plugins" \
          --set QT_QPA_PLATFORM_PLUGIN_PATH "$out/plugins/platforms" \
          --set QT_XKB_CONFIG_ROOT "${xkeyboardconfig}/share/X11/xkb" \
          --set HIDE_TOOLBAR_LINE 0 \
          --set LD_PRELOAD "${libredirect}/lib/libredirect.so" \
          --set NIX_REDIRECTS "$out/bin/EnpassHelper/EnpassHelper=$out/bin/EnpassHelper/EnpassHelper.untampered" \
          --prefix PATH : ${lsof}/bin
      '';
    };
    updater = {
      update = stdenv.mkDerivation rec {
        name = "enpass-update-script";
        SCRIPT =./update_script.py;
  
        buildInputs = with pythonPackages; [python requests pathlib2 six attrs ];
        shellHook = ''
        exec python $SCRIPT --target pkgs/tools/security/enpass/data.json --repo ${baseUrl}
  