anchor.diff:        Hyperscan is typically used in a DPI library stack.
       '';
   
  -    homepage = https://www.hyperscan.io/;
  -    maintainers = with lib.maintainers; [ avnik ];
  -    platforms = [ "x86_64-linux" "x86_64-darwin" ];
  -    license = lib.licenses.bsd3;
  +    homepage = "https://www.hyperscan.io/";
  +    maintainers = with maintainers; [ avnik ];
  +    platforms = [ "x86_64-linux" ]; # can't find nm on darwin ; might build on aarch64 but untested
  +    license = licenses.bsd3;
     };
   }
  
positive.code: { lib, stdenv, fetchFromGitHub, cmake, ragel, python27
  , boost
  }:
  
  # NOTICE: pkgconfig, pcap and pcre intentionally omitted from build inputs
  
negative.code: #         I not see any reason (for now) to backport 8.41.
  
  stdenv.mkDerivation rec {
    pname = "hyperscan";
    version = "5.1.1";
  
    src = fetchFromGitHub {
      owner = "intel";
      repo = pname;
      sha256 = "11adkz5ln2d2jywwlmixfnwqp5wxskq1104hmmcpws590lhkjv6j";
      rev = "v${version}";
    };
  
    outputs = [ "out" "dev" ];
  
    buildInputs = [ boost ];
    nativeBuildInputs = [
      cmake ragel python3
      # Consider simply using busybox for these
      # Need at least: rev, sed, cut, nm
      coreutils gnused utillinux
    ];
  
    cmakeFlags = [
      "-DFAT_RUNTIME=ON"
      "-DBUILD_AVX512=ON"
    ]
    ++ stdenv.lib.optional (withStatic) "-DBUILD_STATIC_AND_SHARED=ON"
    ++ stdenv.lib.optional (!withStatic) "-DBUILD_SHARED_LIBS=ON";
  
    postPatch = ''
      sed -i '/examples/d' CMakeLists.txt
      substituteInPlace libhs.pc.in \
        --replace "libdir=@CMAKE_INSTALL_PREFIX@/@CMAKE_INSTALL_LIBDIR@" "libdir=@CMAKE_INSTALL_LIBDIR@" \
        --replace "includedir=@CMAKE_INSTALL_PREFIX@/@CMAKE_INSTALL_INCLUDEDIR@" "includedir=@CMAKE_INSTALL_INCLUDEDIR@"
    '';
  
    meta = with stdenv.lib; {
      description = "High-performance multiple regex matching library";
      longDescription = ''
        Hyperscan is a high-performance multiple regex matching library.
  