anchor.diff:      "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"
     ];
   
  -  version = "2.2.3";
  +  version = "2.2.4";
   in
   stdenv.mkDerivation rec {
     name = "gnupg-${version}";
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "2.2.3";
        pgpsigUrl = map (n: "${n}.sig") urls;
        pgpKeyFingerprints = [
          "D869 2123 C406 5DEA 5E0F  3AB5 249B 39D2 4F25 E3B6"
  
negative.code:         "D238 EA65 D64C 67ED 4C30  73F2 8A86 1B1C 7EFD 60D9"
          "46CC 7308 65BB 5C78 EBAB  ADCF 0437 6F3E E085 6959"
        ];
        sha256 = "401a3e64780fdfa6d7670de0880aa5c9d589b3db7a7098979d7606cec546f2ec";
      };
    };
  
  