anchor.diff: -{ stdenv, git, gitRepo, gnupg ? null, cacert, copyPathsToStore }:
  +{ stdenv, gitRepo, cacert, copyPathsToStore }:
   
   { name, manifest, rev ? "HEAD", sha256
   , repoRepoURL ? "", repoRepoRev ? "", referenceDir ? ""
  
positive.code:       done
      ''}
  
      export HOME=.repo
      repo init ${concatStringsSep " " repoInitFlags}
      repo sync --jobs=$NIX_BUILD_CORES --current-branch
      ${optionalString (!createMirror) "rm -rf $out/.repo"}
  
negative.code:     "GIT_PROXY_COMMAND" "SOCKS_SERVER"
    ];
  
    buildInputs = [ gitRepo cacert ];
  
    GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";
  
    buildCommand = ''
      # Path must be absolute (e.g. for GnuPG: ~/.repoconfig/gnupg/pubring.kbx)
      export HOME="$(pwd)"
  
      mkdir .repo
      ${optionalString (local_manifests != []) ''
        mkdir .repo/local_manifests
  