anchor.diff:    src = fetchurl {
       urls = tarballUrls version;
       hashOutput = false;
  -    sha256 = "fb6a9e879a2f674592e4328c5d9f79f082405ee4bb05cb6e679b90afe9e178f4";
  +    sha256 = "eeadc7e1e1bcef09680fb4837d448fbdf57224978f865ac1c16745868fbd0533";
     };
   
  -  # Hack to not use AVX512 since our binutils is too old
  +  # FIXME: Hack to not use AVX512 since our binutils is too old
     preConfigure = ''
       sed -i 's,avx512,avx513,g' configure
     '';
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "1.0.15";
        minisignUrls = map (n: "${n}.minisig") urls;
        minisignPub = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
        sha256 = "fb6a9e879a2f674592e4328c5d9f79f082405ee4bb05cb6e679b90afe9e178f4";
      };
    };
  
  
negative.code:     "mirror://gentoo/distfiles/libsodium-${version}.tar.gz"
    ];
  
    version = "1.0.16";
  in
  stdenv.mkDerivation rec {
    name = "libsodium-${version}";
  