anchor.diff:    src = fetchurl {
       urls = tarballUrls version;
       hashOutput = false;
  -    sha256 = "e64d8c5fa2d05938a5080cb784a98ac21be0812f2a26f844b18f0d6a0e711984";
  +    sha256 = "d95b361ee6ef7eff86af40c8c72bf9313736ac9f7010d6604d78bf83818e976e";
     };
   
     nativeBuildInputs = [
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "2.2.6";
        pgpsigUrl = map (n: "${n}.sig") urls;
        pgpKeyFingerprints = [
          "D869 2123 C406 5DEA 5E0F  3AB5 249B 39D2 4F25 E3B6"
  
negative.code:     "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"
    ];
  
    version = "2.2.7";
  in
  stdenv.mkDerivation rec {
    name = "gnupg-${version}";
  