anchor.diff:    nwEnv = buildEnv {
       name = "nwjs-env";
       paths = [
  -      xorg.libX11 xorg.libXrender glib /*gtk2*/ gtk3 atk pango cairo gdk-pixbuf
  +      xorg.libX11 xorg.libXrender glib gtk3 atk at-spi2-core pango cairo gdk-pixbuf
         freetype fontconfig xorg.libXcomposite alsa-lib xorg.libXdamage
  -      xorg.libXext xorg.libXfixes nss nspr gconf expat dbus
  +      xorg.libXext xorg.libXfixes mesa nss nspr gconf expat dbus
         xorg.libXtst xorg.libXi xorg.libXcursor xorg.libXrandr
  -      xorg.libXScrnSaver cups
  -      libcap libnotify
  +      xorg.libXScrnSaver xorg.libxshmfence cups
  +      libcap libdrm libnotify
  +      libxkbcommon
         # libnw-specific (not chromium dependencies)
         ffmpeg libxcb
         # chromium runtime deps (dlopen’d)
  
positive.code: { stdenv, lib, fetchurl, buildEnv, makeWrapper
  
  , xorg, alsa-lib, dbus, glib, gtk3, atk, pango, freetype, fontconfig
  , gdk-pixbuf, cairo, nss, nspr, gconf, expat, systemd, libcap
  , libnotify
  , ffmpeg, libxcb, cups
  , sqlite, udev
  
negative.code: 
  in stdenv.mkDerivation rec {
    pname = "nwjs";
    version = "0.54.1";
  
    src = if sdk then fetchurl {
      url = "https://dl.nwjs.io/v${version}/nwjs-sdk-v${version}-linux-${bits}.tar.gz";
      sha256 = if bits == "x64" then
        "sha256-1qeU4+EIki0M7yJPkRuzFwMdswfDOni5gltdmM6A/ds=" else
        "sha256-wDEGePE9lrKa6OAzeiDLhVj992c0TJgiMHb8lJ4PF80=";
    } else fetchurl {
      url = "https://dl.nwjs.io/v${version}/nwjs-v${version}-linux-${bits}.tar.gz";
      sha256 = if bits == "x64" then
        "sha256-TACEM06K2t6dDXRD44lSW7GRi77yzSW4BZJw8gT+fl4=" else
        "sha256-yX9knqFV5VQTT3TJDmQoDgt17NqH8fLt+bLQAqKleTU=";
    };
  
    # we have runtime deps like sqlite3 that should remain
  