Change:
the package wechat uos is still using OpenSSL 1.1 which is end of life on 2023/09/11, so it is marked as insecure now. not sure if we need to wait for wechat-uos or we can just bump it up in here. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
As far as I know, only from depends on OpenSSL 1.1. Seems like we may replace it with to completely remove dependency. I will try to fix that in the next PR when I have free time.
Would it be offensive if I could submit a patch about it now.
Feel free to do so. I would be happy to review your pr :)

Discussion:
<ins> // taken from https://aur.archlinux.org/cgit/aur.git/tree/libuosdevicea.c?h=wechat-universal /* * licensestub - compat layer for libuosdevicea * Copyright (C) 2024 Zephyr Lykos <self@mochaa.ws> * Copyright (C) 2024 Guoxin "7Ji" Pu <pugokushin@gmail.com> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. * */ #define _GNU_SOURCE #include <string.h> #define declare_string_getter(suffix, constant) void uos_get_##suffix(char *const restrict out) { if (out) strcpy(out, constant); } declare_string_getter(mac,      // MAC address with colon stripped "000000000000") declare_string_getter(hddsninfo, "SN") declare_string_getter(hwserial, // MD5 of hddsninfo "92666505ce75444ee14be2ebc2f10a60") declare_string_getter(mb_sn,    // hardcoded "E50022008800015957007202c59a1a8-3981-2020-0810-204909000000") declare_string_getter(osver, "UnionTech OS Desktop") declare_string_getter(licensetoken, "djEsdjEsMSwyLDk5QUFFN0FBQVdRQjk5OFhKS0FIU1QyOTQsMTAsOTI2NjY1MDVjZTc1NDQ0ZWUxNGJlMmViYzJmMTBhNjAsQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE6ZjA3NjAwYzZkNmMyMDkyMDBkMzE5YzU2OThmNTc3MGRlYWY1NjAyZTY5MzUxZTczNjI2NjlhNzIyZTBkNTJiOTNhYzk0MmM3YTNkZTgxNjIxMmUwMDA1NTUwODg4N2NlMDQ4ODMyNTExY2JhNGFiMjdmYzlmZjMyYzFiNTYwNjMwZDI3ZDI2NmE5ZGIxZDQ0N2QxYjNlNTNlNTVlOTY1MmU5YTU4OGY0NWYzMTMwZDE0NDc4MTRhM2FmZjRlZGNmYmNkZjhjMmFiMDc5OWYwNGVmYmQ2NjdiNGYwYzEwNDhkYzExNjYwZWU1NTdlNTdmNzBlNjA1N2I0NThkMDgyOA==") int uos_is_active() { return 0; } </ins>

, mesa , alsa-lib , wayland <del> , openssl_1_1 </del> , atk , qt6 , at-spi2-atk

outputHash = "sha256-pNftwtUZqBsKBSPQsEWlYLlb6h2Xd9j56ZRMi8I82ME="; }; <ins> libuosdevicea = stdenv.mkDerivation rec { name = "libuosdevicea"; src = ./libuosdevicea.c; unpackPhase = '' runHook preUnpack cp ${src} libuosdevicea.c runHook postUnpack ''; buildPhase = '' runHook preBuild $CC -shared -fPIC -o libuosdevicea.so libuosdevicea.c runHook postBuild ''; installPhase = '' runHook preInstall mkdir -p $out/lib cp libuosdevicea.so $out/lib/ runHook postInstall ''; meta = with lib; { license = licenses.gpl2Plus; }; }; </ins> wechat-uos-runtime = with xorg; [ # Make sure our glibc without hardening gets picked up first (lib.hiPrio glibcWithoutHardening)

wayland pulseaudio qt6.qt5compat <del> openssl_1_1 </del> bzip2 ];

}; }.${stdenv.system} or (throw "${pname}-${version}: ${stdenv.system} is unsupported."); <del> # Don't blame about this. WeChat requires some binary from here to work properly uosSrc = { x86_64-linux = fetchurl { url = "https://pro-store-packages.uniontech.com/appstore/pool/appstore/c/com.tencent.weixin/com.tencent.weixin_2.1.5_amd64.deb"; hash = "sha256-vVN7w+oPXNTMJ/g1Rpw/AVLIytMXI+gLieNuddyyIYE="; }; aarch64-linux = fetchurl { url = "https://pro-store-packages.uniontech.com/appstore/pool/appstore/c/com.tencent.weixin/com.tencent.weixin_2.1.5_arm64.deb"; hash = "sha256-XvGFPYJlsYPqRyDycrBGzQdXn/5Da1AJP5LgRVY1pzI="; }; loongarch64-linux = fetchurl { url = "https://pro-store-packages.uniontech.com/appstore/pool/appstore/c/com.tencent.weixin/com.tencent.weixin_2.1.5_loongarch64.deb"; hash = "sha256-oa6rLE6QXMCPlbebto9Tv7xT3fFqYIlXL6WHpB2U35s="; }; }.${stdenv.system} or (throw "${pname}-${version}: ${stdenv.system} is unsupported."); </del> inherit uosLicense; nativeBuildInputs = [ dpkg ];

runHook preUnpack dpkg -x $src ./wechat-uos <del> dpkg -x $uosSrc ./wechat-uos-old-source </del> runHook postUnpack '';

mkdir -pv $out/usr/lib/wechat-uos/license ln -s ${uosLicenseUnzipped}/* $out/usr/lib/wechat-uos/license/ <del> cp -r wechat-uos-old-source/usr/lib/license/libuosdevicea.so $out/usr/lib/wechat-uos/license/ </del> <ins> ln -s ${libuosdevicea}/lib/libuosdevicea.so $out/usr/lib/wechat-uos/license/ </ins> runHook postInstall '';