anchor.diff:    deps = stdenv.mkDerivation {
       pname = "${pname}-deps";
       inherit src version;
  +    patches = [ log4j-update-cve-2021-44228 ];
       nativeBuildInputs = [ gradle_6 perl ];
       buildPhase = ''
         export GRADLE_USER_HOME=$(mktemp -d)
  
positive.code: { lib, stdenv, fetchurl, fetchFromGitLab, jdk17_headless, coreutils, gradle_6, git, perl
  , makeWrapper }:
  
  let
    pname = "signald";
  
negative.code:     sha256 = "ftK+oeqzJ+TxrlvqivFkAi5RCcyJ5Y0oQAJuo0YheBg=";
    };
  
    log4j-update-cve-2021-44228 = fetchpatch {
      url = "https://gitlab.com/signald/signald/-/commit/7f668062ab9ffa09a49d171e995f57cf0a0803a7.patch";
      sha256 = "sha256-504je6hKciUGelVCGZjxGjHi1qZQaovagXD5PBQP+mM=";
    };
  
    buildConfigJar = fetchurl {
      url = "https://dl.bintray.com/mfuerstenau/maven/gradle/plugin/de/fuerstenau/BuildConfigPlugin/1.1.8/BuildConfigPlugin-1.1.8.jar";
      sha256 = "0y1f42y7ilm3ykgnm6s3ks54d71n8lsy5649xgd9ahv28lj05x9f";
  