anchor.diff:  
     postFixup = ''
       patchelf --add-needed $out/lib/meshlab/libmeshlab-common.so $out/bin/.meshlab-wrapped
  -    patchelf --add-needed $out/lib/meshlab/libmeshlab-common.so $out/bin/.meshlabserver-wrapped
     '';
  -
  -  # Meshlab is not format-security clean; without disabling hardening, we get:
  -  # src/common/GLLogStream.h:61:37: error: format not a string literal and no format arguments [-Werror=format-security]
  -  #  61 |         int chars_written = snprintf(buf, buf_size, f, std::forward<Ts>(ts)...);
  -  #     |
  -  hardeningDisable = [ "format" ];
   
     meta = {
       description = "A system for processing and editing 3D triangular meshes";
       homepage = "https://www.meshlab.net/";
  -    license = lib.licenses.gpl3;
  +    license = lib.licenses.gpl3Only;
       maintainers = with lib.maintainers; [ viric ];
       platforms = with lib.platforms; linux;
     };
  
positive.code: { mkDerivation
  , lib
  , fetchFromGitHub
  , fetchpatch
  , libGLU
  , qtbase
  , qtscript
  
negative.code: 
    nativeBuildInputs = [ cmake ];
  
    preConfigure = ''
      substituteAll ${./meshlab.desktop} scripts/Linux/resources/meshlab.desktop
      cmakeDir=$PWD/src
      mkdir ../build
      cd ../build
    '';
  
    cmakeFlags = [
  