anchor.diff:  
     postPatch = ''
       # Fix perl scripts used during the build.
  -    for f in `find . -type f -name '*.pl'`; do
  +    for f in $(find . -type f -name '*.pl') ; do
         patchShebangs $f
       done
   
       # Fix hard coded paths.
  -    for f in `grep -Rl /usr/share/ src`; do
  +    for f in $(grep -Rl /usr/share/ src) ; do
         substituteInPlace $f --replace /usr/share/ $out/share/
       done
   
       # Fix hard coded zip path.
       substituteInPlace help/Makefile.linux --replace /usr/bin/zip ${zip}/bin/zip
   
  -    for f in `grep -Rl /usr/bin/ .`; do
  +    for f in $(grep -Rl /usr/bin/ .) ; do
         substituteInPlace $f --replace /usr/bin/ ""
       done
     '';
  
positive.code: 
  stdenv.mkDerivation rec {
    pname = "pwsafe";
    version = "3.56.0";
  
    src = fetchFromGitHub {
      owner = pname;
      repo = pname;
      rev = version;
      sha256 = "sha256-ZLX/3cs1cdia5+32QEwE6q3V0uFNkkmiIGboKW6Xej8=";
    };
  
    nativeBuildInputs = [
  
negative.code: { lib, stdenv, fetchFromGitHub
  , cmake, pkg-config, zip, gettext, perl
  , wxGTK30, libXext, libXi, libXt, libXtst, xercesc
  , qrencode, libuuid, libyubikey, yubikey-personalization
  , curl, openssl, file
  