anchor.diff:      click
       prettytable
       pysigma
  +    pysigma-backend-elasticsearch
  +    pysigma-backend-insightidr
  +    pysigma-backend-opensearch
  +    pysigma-backend-qradar
       pysigma-backend-splunk
  -    pysigma-backend-insightidr
       pysigma-pipeline-crowdstrike
       pysigma-pipeline-sysmon
       pysigma-pipeline-windows
  
positive.code:   postPatch = ''
      substituteInPlace pyproject.toml \
        --replace 'prettytable = "^3.1.1"' 'prettytable = "*"' \
        --replace 'pysigma = "^0.5.0"' 'pysigma = "*"'
    '';
  
    pythonImportsCheck = [
  
negative.code: 
  python3.pkgs.buildPythonApplication rec {
    pname = "sigma-cli";
    version = "0.5.0";
    format = "pyproject";
  
    src = fetchFromGitHub {
      owner = "SigmaHQ";
      repo = pname;
      rev = "refs/tags/v${version}";
      hash = "sha256-i0rin4TLoqo+F2nWG4kcFp3x/cRtkMzAo5Ldyo0Si5w=";
    };
  
    nativeBuildInputs = with python3.pkgs; [
  