anchor.diff:      apk add --no-cache $BUILD_DEPS && \
       mkdir -p /tmp/src && \
       cd /tmp/src && \
  -    git clone --depth=1 --branch=${DNSCRYPT_WRAPPER_GIT_BRANCH} ${DNSCRYPT_WRAPPER_GIT_URL} && \
  +    git clone --depth=1 --branch="${DNSCRYPT_WRAPPER_GIT_BRANCH}" "${DNSCRYPT_WRAPPER_GIT_URL}" && \
       cd dnscrypt-wrapper && \
       sed -i 's#<sys/queue.h>#"/tmp/queue.h"#' compat.h && \
       sed -i 's#HAVE_BACKTRACE#NO_BACKTRACE#' compat.h && \
  
positive.code:     git clone --depth=1 --branch stable "$LIBSODIUM_GIT_URL" && \
      cd libsodium && \
      env CFLAGS=-Ofast ./configure --disable-dependency-tracking && \
      make -j$(getconf _NPROCESSORS_ONLN) check && make -j$(getconf _NPROCESSORS_ONLN) install && \
      ldconfig /usr/local/lib && \
      apk del --purge $BUILD_DEPS && \
      rm -fr /tmp/* /var/tmp/*
  
negative.code:     useradd -g _dnscrypt-wrapper -s /etc -d /opt/dnscrypt-wrapper/empty _dnscrypt-wrapper && \
      groupadd _dnscrypt-signer && \
      useradd -g _dnscrypt-signer -G _dnscrypt-wrapper -s /etc -d /dev/null _dnscrypt-signer && \
      make -j"$(getconf _NPROCESSORS_ONLN)" configure && \
      env CFLAGS=-Ofast ./configure --prefix=/opt/dnscrypt-wrapper && \
      make -j"$(getconf _NPROCESSORS_ONLN)" install && \
      apk del --purge $BUILD_DEPS && \
      rm -fr /tmp/* /var/tmp/*
  
  