anchor.diff:  }:
   
   let
  -  version = "3.38";
  +  version = "3.39";
   
     baseUrl = "https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases"
       + "/NSS_${stdenv.lib.replaceStrings ["."] ["_"] version}_RTM/src";
  
positive.code: 
      srcVerification = fetchurl {
        failEarly = true;
        sha256Url = "${baseUrl}/SHA256SUMS";
        inherit (src) urls outputHash outputHashAlgo;
      };
    };
  
  
negative.code:   src = fetchurl {
      url = "${baseUrl}/${name}.tar.gz";
      hashOutput = false;
      sha256 = "6be64dd76f212415cc8bc34343ac1e7389048db4db9a023a84873c411dc5864b";
    };
  
    buildInputs = [
  