anchor.diff:      unzip
     ];
   }) // {
  -  inherit brotli tar purgeTimestamps;
  +  inherit deterministic-zip purgeTimestamps;
   }
  
positive.code:   '') + extraPostFetch + ''
      cd "$TMPDIR"
    '' + (if purgeTimestamps then ''
      mtime="946713600"
    '' else ''
      mtime=$(find "${name'}" -type f -print0 | xargs -0 -r stat -c '%Y' | sort -n | tail -n 1)
      if [ "$NIX_BUILD_START" -lt "$mtime" ]; then
        str="The newest file is too close to the current date:\n"
        str+="  File: $(date -d "@$mtime")\n"
        str+="  Build Start: $NIX_BUILD_START\n"
        echo -e "$str" >&2
        exit 1
      fi
    '') + ''
      echo -n "Clamping to date: " >&2
      date -d "@$mtime" --utc >&2
    '' + ''
      echo "Building Archive ${name}" >&2
      ${tar}/bin/tar --sort=name --owner=0 --group=0 --numeric-owner \
        --no-acls --no-selinux --no-xattrs \
        --mode=go=rX,u+rw,a-s \
        --clamp-mtime --mtime=@$mtime \
        -c "${name'}" | ${brotli}/bin/brotli ${lib.concatStringsSep " " brotliFlags} "$out"
    '';
  } // removeAttrs args [ "name" "version" "purgeTimestamps" "downloadToTemp" "postFetch" "stripRoot" "extraPostFetch" ]))
  # Hackety-hack: we actually need unzip hooks, too
  
negative.code: # in timestamps).
  
  { lib
  , deterministic-zip
  , fetchurl
  , unzip
  }:
  
  