jiebi/CodeConvo huggingface dataset:
Change:
, CVSSv3=6.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc Cc

Discussion:
package = mkOption { type = types.package; <ins> default = pkgs.jellyfin; </ins> example = literalExample "pkgs.jellyfin"; description = '' Jellyfin package to use.

}; }; <del> services.jellyfin.package = mkDefault ( if versionAtLeast config.system.stateVersion "20.09" then pkgs.jellyfin else pkgs.jellyfin_10_5 ); </del> users.users = mkIf (cfg.user == "jellyfin") { jellyfin = { group = cfg.group;

<del> { stdenv, lib, fetchurl, unzip, sqlite, makeWrapper, dotnetCorePackages, ffmpeg, fontconfig, freetype, nixosTests }: let os = if stdenv.isDarwin then "osx" else "linux"; arch = with stdenv.hostPlatform; if isx86_32 then "x86" else if isx86_64 then "x64" else if isAarch32 then "arm" else if isAarch64 then "arm64" else lib.warn "Unsupported architecture, some image processing features might be unavailable" "unknown"; musl = lib.optionalString stdenv.hostPlatform.isMusl (if (arch != "x64") then lib.warn "Some image processing features might be unavailable for non x86-64 with Musl" "musl-" else "musl-"); runtimeDir = "${os}-${musl}${arch}"; in stdenv.mkDerivation rec { pname = "jellyfin"; version = "10.5.5"; # Impossible to build anything offline with dotnet src = fetchurl { url = "https://github.com/jellyfin/jellyfin/releases/download/v${version}/jellyfin_${version}_portable.tar.gz"; sha256 = "1s3hva1j5w74qc9wyqnmr5clk4smzfi7wvx8qrzrwy81mx7r5w27"; }; nativeBuildInputs = [ unzip ]; buildInputs = [ makeWrapper ]; propagatedBuildInputs = [ dotnetCorePackages.aspnetcore_3_1 sqlite ]; preferLocalBuild = true; installPhase = '' install -dm 755 "$out/opt/jellyfin" cp -r * "$out/opt/jellyfin" makeWrapper "${dotnetCorePackages.aspnetcore_3_1}/bin/dotnet" $out/bin/jellyfin  --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ sqlite fontconfig freetype stdenv.cc.cc.lib ]}:$out/opt/jellyfin/runtimes/${runtimeDir}/native/"  --add-flags "$out/opt/jellyfin/jellyfin.dll --ffmpeg ${ffmpeg}/bin/ffmpeg" ''; passthru.tests = { smoke-test = nixosTests.jellyfin; }; meta =  with lib; { description = "The Free Software Media System"; homepage = "https://jellyfin.org/"; license = licenses.gpl2; maintainers = with maintainers; [ nyanloutre minijackson ]; }; } </del>

kodiGBM = kodi-gbm; kodiPlain = kodi; kodiPlainWayland = kodi-wayland; <ins> jellyfin_10_5 = throw "Jellyfin 10.5 is no longer supported and contains a security vulnerability. Please upgrade to a newer version."; # added 2021-04-26 </ins> julia_07 = throw "julia_07 is deprecated in favor of julia_10 LTS"; # added 2020-09-15 julia_11 = throw "julia_11 is deprecated in favor of latest Julia version"; # added 2020-09-15 kdeconnect = plasma5Packages.kdeconnect-kde; # added 2020-10-28

jellyfin = callPackage ../servers/jellyfin { }; <del> jellyfin_10_5 = callPackage ../servers/jellyfin/10.5.x.nix { }; </del> jellyfin-media-player = libsForQt5.callPackage ../applications/video/jellyfin-media-player { inherit (darwin.apple_sdk.frameworks) CoreFoundation Cocoa CoreAudio MediaPlayer; };
Change:
, CVSSv3=7.5 (nixos-20.09) Scanned versions: nixos-20.09: . Cc
Is it still worth fixing now that 21.05 has been released?
Support for the last release should be provided at least for 2 months after release. Not all users are able to transition to the new release immediately. So if there is a patch or a point release available, an update for 20.09 would be appreciated. What we usually do not do for old releases is to introduce breaking changes or major updates.

Discussion:
{ stdenv, lib, fetchurl, pkgconfig, removeReferencesTo , libevent, readline, net-snmp, openssl <ins> , fetchpatch </ins> }: stdenv.mkDerivation rec {

sha256 = "16fbqrs3l976gdslx647nds8x7sz4h5h3h4l4yxzrayvyh9b5lrd"; }; <ins> patches = [ (fetchpatch { name = "CVE-2020-27827-1.patch"; url = "https://github.com/lldpd/lldpd/commit/a8d3c90feca548fc0656d95b5d278713db86ff61.patch"; sha256 = "135hnq3wzga3zpmpy65jyyqyn67id9di1y3kv2qczp5jdgxfx9cy"; }) (fetchpatch { name = "CVE-2020-27827-2.patch"; url = "https://github.com/lldpd/lldpd/commit/7d60bf30effc4c88f17f3d58ecaa72479f16d4be.patch"; sha256 = "0b2j8sn2z7p9250iki7rx88f9cdrxv5by7cbmmmwa0h4c5cb6b61"; excludes = [ "NEWS" ]; }) ]; </ins> configureFlags = [ "--localstatedir=/var" "--enable-pie"
Change:
, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc Cc

Discussion:
<ins> Patch included in advisory @ https://subversion.apache.org/security/CVE-2020-17525-advisory.txt --- a/subversion/libsvn_repos/config_file.c +++ b/subversion/libsvn_repos/config_file.c @@ -237,6 +237,10 @@ get_repos_config(svn_stream_t **stream, { /* Search for a repository in the full path. */ repos_root_dirent = svn_repos_find_root_path(dirent, scratch_pool); +      if (repos_root_dirent == NULL) +        return svn_error_trace(handle_missing_file(stream, checksum, access, +                                                   url, must_exist, +                                                   svn_node_none)); /* Attempt to open a repository at repos_root_dirent. */ SVN_ERR(svn_repos_open3(&access->repos, repos_root_dirent, NULL, </ins>

let <del> common = { version, sha256 }: stdenv.mkDerivation (rec { </del> <ins> common = { version, sha256, extraPatches ? [ ] }: stdenv.mkDerivation (rec { </ins> inherit version; pname = "subversion";

++ lib.optional perlBindings perl ++ lib.optional saslSupport sasl; <del> patches = [ ./apr-1.patch ]; </del> <ins> patches = [ ./apr-1.patch ] ++ extraPatches; </ins> # We are hitting the following issue even with APR 1.6.x # -> https://issues.apache.org/jira/browse/SVN-4813

subversion = common { version = "1.12.2"; sha256 = "0wgpw3kzsiawzqk4y0xgh1z93kllxydgv4lsviim45y5wk4bbl1v"; <ins> extraPatches = [ ./CVE-2020-17525.patch ]; </ins> }; }
Change:
, CVSSv3=7.5 (nixos-20.09, nixos-unstable) Scanned versions: nixos-20.09: ; nixos-unstable: . Cc Cc
See also:
This effectively needs a patch for the package in as far as I can see. It would be nice to have a label or something like that :)
Without knowing the internals of the subversion source well, I don't think it's going to be particularly easy to patch. The location to add the nullptr check is easy enough to find, but it's unclear what the right action to take is when the null is detected. The 1.10.x patch in that case calls a function that doesn't exist in 1.9. Without learning more about the subversion internals I'd be afraid of turning a null pointer dereference into something much worse. Or throwing an error that basically just terminates the process anyway, which wouldn't make the situation a whole lot better.
In that case it might make sense to mark it as known vulnerable?
Probably.
This doesn't affect nixos-unstable since has been removed there. Why did you scan a commit from March 19 for nixos-unstable?

Discussion:
let <del> common = { version, sha256, extraBuildInputs ? [ ] }: stdenv.mkDerivation (rec { </del> <ins> common = { version, sha256, extraBuildInputs ? [ ], knownVulnerabilities ? [ ] }: stdenv.mkDerivation (rec { </ins> inherit version; pname = "subversion";

homepage = "http://subversion.apache.org/"; maintainers = with maintainers; [ eelco lovek323 ]; platforms = platforms.linux ++ platforms.darwin; <ins> inherit knownVulnerabilities; </ins> }; } // stdenv.lib.optionalAttrs stdenv.isDarwin {

subversion19 = common { version = "1.9.12"; sha256 = "15z33gdnfiqblm5515020wfdwnp2837r3hnparava6m2fgyiafiw"; <ins> knownVulnerabilities = [ "https://subversion.apache.org/security/CVE-2020-17525-advisory.txt" ]; </ins> }; subversion_1_10 = common {
Change:
The nixos-unstable and nixos-unstable-small channels are currently blocked because the "auto" disk image size calculation underestimates the required space in certain situations. This causes the disk to be sized to small for its contents when building the Amazon EC2 image.
Downgrading from channel blocker
I guess this is fixed now?
I marked this as stale due to inactivity. &rarr;

Discussion:
sizeMB = mkOption { type = with types; either (enum [ "auto" ]) int; <del> default = "auto"; </del> <ins> # TODO(lukegb): this should be "auto"; see #120473 default = if config.ec2.hvm then 2048 else 8192; </ins> example = 8192; description = "The size in MB of the image"; };
Change:
Buck build system is packaged with the wrong JDK it seems PR introduced a bump in JDK version, see (). Metadata Please run and paste the result. Maintainer information:
I guess the most recent version should support java 11:
Until they make a stable release with those changes included, we will just use jdk8

Discussion:
<del> { lib, stdenv, fetchFromGitHub, jdk11, ant, python3, watchman, bash, makeWrapper }: </del> <ins> { lib, stdenv, fetchFromGitHub, jdk8, ant, python3, watchman, bash, makeWrapper }: </ins> stdenv.mkDerivation rec { pname = "buck";

grep -l -r '/bin/bash' --null | xargs -0 sed -i -e "s!/bin/bash!${bash}/bin/bash!g" ''; <del> nativeBuildInputs = [ makeWrapper python3 jdk11 ant watchman ]; </del> <ins> nativeBuildInputs = [ makeWrapper python3 jdk8 ant watchman ]; </ins> buildPhase = '' # Set correct version, see https://github.com/facebook/buck/issues/2607

installPhase = '' install -D -m755 buck-out/gen/*/programs/buck.pex $out/bin/buck wrapProgram $out/bin/buck  <del> --prefix PATH : "${lib.makeBinPath [ jdk11 watchman python3 ]}" </del> <ins> --prefix PATH : "${lib.makeBinPath [ jdk8 watchman python3 ]}" </ins> ''; meta = with lib; {
Change:
Describe the bug Since upgrading v8 to 8.4 () it no longer builds on darwin (at least on my 11.2.3 machine) To Reproduce Steps to reproduce the behavior: Expected behavior A successful v8 build Additional context By default it fails when trying to find the macos sdk, which I patched around with: This then gets as far as , which is avoidable with: which then produces ... and I had to admit defeat. Notify maintainers Metadata Maintainer information:
Hi! Thanks for reporting this! I've opened which I hope fixes this - at least it builds fine for me on 10.15. Please give it a try on your machine too.
Yep, looks good!

Discussion:
{ stdenv, lib, fetchgit, fetchFromGitHub <del> , gn, ninja, python, glib, pkg-config, icu </del> <ins> , gn, ninja, python, pythonPackages, glib, pkg-config, icu </ins> , xcbuild, darwin , fetchpatch }:

doCheck = true; patches = [ <ins> # Remove unrecognized clang debug flags (fetchpatch { url = "https://raw.githubusercontent.com/saiarcot895/chromium-ubuntu-build/663dbfc492fd2f8ba28d9af40fb3b1327e6aa56e/debian/patches/revert-Xclang-instcombine-lower-dbg-declare.patch"; sha256 = "07qp4bjgbwbdrzqslvl2bgbzr3v97b9isbp0539x3lc8cy3h02g1"; }) </ins> ./darwin.patch ./gcc_arm.patch  # Fix building zlib with gcc on aarch64, from https://gist.github.com/Adenilson/d973b6fd96c7709d33ddf08cf1dcb149 ];

postPatch = lib.optionalString stdenv.isAarch64 '' substituteInPlace build/toolchain/linux/BUILD.gn  --replace 'toolprefix = "aarch64-linux-gnu-"' 'toolprefix = ""' <ins> '' + lib.optionalString stdenv.isDarwin '' substituteInPlace build/config/compiler/compiler.gni  --replace 'strip_absolute_paths_from_debug_symbols = true'  'strip_absolute_paths_from_debug_symbols = false' substituteInPlace build/config/compiler/BUILD.gn  --replace 'current_toolchain == host_toolchain || !use_xcode_clang'  'false' </ins> ''; gnFlags = [

"is_clang=${lib.boolToString stdenv.cc.isClang}" "use_sysroot=false" # "use_system_icu=true" <ins> "clang_use_chrome_plugins=false" </ins> "is_component_build=false" "v8_use_external_startup_data=false" "v8_monolithic=true"

"treat_warnings_as_errors=false" "v8_enable_i18n_support=true" "use_gold=false" <del> "use_system_xcode=true" </del> <ins> "init_stack_vars=false" </ins> # ''custom_toolchain="//build/toolchain/linux/unbundle:default"'' ''host_toolchain="//build/toolchain/linux/unbundle:default"'' ''v8_snapshot_toolchain="//build/toolchain/linux/unbundle:default"'' ] ++ lib.optional stdenv.cc.isClang ''clang_base_path="${stdenv.cc}"''; NIX_CFLAGS_COMPILE = "-O2"; <del> nativeBuildInputs = [ gn ninja pkg-config python ] ++ lib.optionals stdenv.isDarwin [ xcbuild darwin.DarwinTools ]; </del> <ins> FORCE_MAC_SDK_MIN = stdenv.targetPlatform.sdkVer or "10.12"; nativeBuildInputs = [ gn ninja pkg-config python ] ++ lib.optionals stdenv.isDarwin [ xcbuild darwin.DarwinTools pythonPackages.setuptools ]; </ins> buildInputs = [ glib icu ]; ninjaFlags = [ ":d8" "v8_monolith" ];
Change:
Describe the bug In order to be able to invoke the command from teleport is using  call. There is a wrapper around to bring into PATH . That means is invoked from without wrapper and the browser page never opens (due to missing ). To Reproduce Steps to reproduce the behavior: Expected behavior The path to the wrapper must be persisted in the Screenshots If applicable, add screenshots to help explain your problem. Additional context Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata Please run and paste the result. Maintainer information:

Discussion:
buildGoModule rec { pname = "teleport"; <del> version = "6.1.2"; </del> <ins> version = "6.1.3"; </ins> # This repo has a private submodule "e" which fetchgit cannot handle without failing. src = fetchFromGitHub { owner = "gravitational"; repo = "teleport"; rev = "v${version}"; <del> sha256 = "sha256-4ZaebTTgGrGRQbMfDw1PL/qtDKmHbSY6kPmWyFeIcAU="; </del> <ins> sha256 = "sha256-kb7qRPZKXDY0Qy3/72epAGaN2FCOO/XAN8lOoUYkoM0="; </ins> }; vendorSha256 = null;

nativeBuildInputs = [ zip makeWrapper ]; <ins> # https://github.com/NixOS/nixpkgs/issues/120738 patches = [ ./tsh.patch ]; </ins> postBuild = '' pushd . mkdir -p build

postInstall = '' install -Dm755 -t $client/bin $out/bin/tsh <del> wrapProgram $client/bin/tsh --prefix PATH : ${xdg-utils}/bin wrapProgram $out/bin/tsh --prefix PATH : ${xdg-utils}/bin </del> <ins> wrapProgram $client/bin/tsh --prefix PATH : ${lib.makeBinPath [ xdg-utils ]} wrapProgram $out/bin/tsh --prefix PATH : ${lib.makeBinPath [ xdg-utils ]} </ins> ''; doInstallCheck = true;

<ins> diff --git a/tool/tsh/tsh.go b/tool/tsh/tsh.go index 57379c40f..cb4d7b84c 100644 --- a/tool/tsh/tsh.go +++ b/tool/tsh/tsh.go @@ -514,10 +514,11 @@ func Run(args []string, opts ...cliOption) error { } } -	cf.executablePath, err = os.Executable() +	tempBinaryPath, err := os.Executable() if err != nil { return trace.Wrap(err) } +	cf.executablePath = path.Dir(tempBinaryPath) + "/tsh" if err := client.ValidateAgentKeyOption(cf.AddKeysToAgent); err != nil { return trace.Wrap(err) </ins>
Change:
Describe the bug when a root-owned process dumps core (eg recent sshd, due to a known bug) and coredumps are enabled, systemd-coredump warns (but proceeds successfully). To Reproduce Steps to reproduce the behavior: systemd coredumps enabled a SIGABRT to any root-owned process (eg by running ) Expected behavior coredumps succeeds with proper privsep Screenshots Additional context Notify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:
Can you reproduce this with a simple c binary you interactively run as root user?
yes, as root does it. amended the original post addendum: if you want a minimal C example that causes it:
still happening regularly due to a bug in openssh (race conditions in process shutdown can cause seccomp filters to trigger)
I am also observing this problem, both sshd dumping core and the systemd-coredump error when it happens. I can also reproduce it with as root.
I can confirm I see the log messages: I looked at . It seems systemd-coredump wants to drop privileges to a user (but falls back to root if it can't find it). suggests we should create it (like we create one for ). I opened , which does that.

Discussion:
#seeks = 148; # removed 2020-06-21 prosody = 149; i2pd = 150; <ins> systemd-coredump = 151; </ins> systemd-network = 152; systemd-resolve = 153; systemd-timesync = 154;

services.dbus.enable = true; <ins> users.users.systemd-coredump.uid = config.ids.uids.systemd-coredump; </ins> users.users.systemd-network.uid = config.ids.uids.systemd-network; users.groups.systemd-network.gid = config.ids.gids.systemd-network; users.users.systemd-resolve.uid = config.ids.uids.systemd-resolve;
Change:
Describe the bug Build fails with To Reproduce Steps to reproduce the behavior: Expected behavior build should succeed. Screenshots Additional context updating the nvidia package should fix this as state: Fixed a driver installation failure on Linux kernel 5.11 release candidates, where the NVIDIA kernel module failed to build with error "fatal error: asm/kmaptypes.h: No such file or directory". PR on the way Notify maintainers Metadata Please run and paste the result. system: host os: multi-user?: sandbox: version: channels(root): channels(louis): nixpkgs: Maintainer information:

Discussion:
# Last one supporting x86 legacy_390 = generic { <del> version = "390.138"; sha256_32bit = "0y3qjygl0kfz9qs0rp9scn1k3l8ym9dib7wpkyh5gs4klcip7xkv"; sha256_64bit = "0rnnb5l4i8s76vlg6yvlrxhm2x9wdqw7k5hgf4fyaa3cr3k1kysz"; settingsSha256 = "0ad6hwl56nvbdv9g85lw7ywadqvc2gaq9x6d2vjcia9kg4vrmfqx"; persistencedSha256 = "15jciyq6i3pz1g67xzqlwmc62v3xswzhjcqmfcdndvlvhcibsimr"; </del> <ins> version = "390.143"; sha256_32bit = "AelrdTTeo/3+ZdXK0iniZDB8gJUkeZQtNoRm25z+bQY="; sha256_64bit = "tyKqcPM71ErK8ZZHLPtxmgrWzv6tfEmxBRveCSwTlO8="; settingsSha256 = "EJPXZbxZS1CMENAYk9dCAIsHsRTXJpj473+JLuhGkWI="; persistencedSha256 = "FtlPF3jCNr18NnImTmr8zJsaK9wbj/aWZ9LwoLr5SeE="; </ins> }; legacy_340 = generic {
Change:
Describe the bug Expected behavior The nixos module should be aware of the deprecated options and the resulting config should be updated. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Please run and paste the result. Maintainer information:

Discussion:
acl_file ${aclFile} persistence true allow_anonymous ${boolToString cfg.allowAnonymous} <del> bind_address ${cfg.host} port ${toString cfg.port} </del> <ins> listener ${toString cfg.port} ${cfg.host} </ins> ${passwordConf} ${listenerConf} ${cfg.extraConf}

ExecStart = "${pkgs.mosquitto}/bin/mosquitto -c ${mosquittoConf}"; ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; <del> ProtectSystem = "strict"; ProtectHome = true; </del> <ins> # Hardening CapabilityBoundingSet = ""; DevicePolicy = "closed"; LockPersonality = true; MemoryDenyWriteExecute = true; NoNewPrivileges = true; </ins> PrivateDevices = true; PrivateTmp = true; <del> ReadWritePaths = "${cfg.dataDir}"; </del> <ins> PrivateUsers = true; ProtectClock = true; </ins> ProtectControlGroups = true; <ins> ProtectHome = true; ProtectHostname = true; ProtectKernelLogs = true; </ins> ProtectKernelModules = true; ProtectKernelTunables = true; <del> NoNewPrivileges = true; </del> <ins> ProtectProc = "invisible"; ProcSubset = "pid"; ProtectSystem = "strict"; ReadWritePaths = [ cfg.dataDir "/tmp"  # mosquitto_passwd creates files in /tmp before moving them ]; ReadOnlyPaths = with cfg.ssl; lib.optionals (enable) [ certfile keyfile cafile ]; RemoveIPC = true; RestrictAddressFamilies = [ "AF_UNIX"  # for sd_notify() call "AF_INET" "AF_INET6" ]; RestrictNamespaces = true; RestrictRealtime = true; RestrictSUIDSGID = true; SystemCallArchitectures = "native"; SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ]; UMask = "0077"; </ins> }; preStart = '' rm -f ${cfg.dataDir}/passwd

<del> import ./make-test-python.nix ({ pkgs, ... }: </del> <ins> import ./make-test-python.nix ({ pkgs, lib, ... }: </ins> let port = 1888;

]; }; }; <ins> # disable private /tmp for this test systemd.services.mosquitto.serviceConfig.PrivateTmp = lib.mkForce false; </ins> }; client1 = client;
Change:
Describe the bug depends on which bloats the closure size of Nix among other things. To Reproduce Expected behavior Not see -bin in the dependencies of openssl. Notify maintainers I believe this was introduce in Metadata Please run and paste the result. Maintainer information:
That's by design.
This should fix it (untested)
Hm, yeah, maybe dev depending on bin is intended, but somewhere along the line something must be wrong - I don't think it's intended for Nix to depend on
I don't think it is intended. It's just the default which was not changed here. In fact, when I inspected I did not find any other reference to than in . So I think it should be safe to remove from like in the above patch. Unfortunately, properly testing this would trigger a rebuild of pretty much all of nixpkgs.

Discussion:
nativeBuildInputs = [ cmake ]; <del> buildInputs = [ aws-c-cal aws-c-common s2n-tls]; </del> <ins> buildInputs = [ aws-c-cal aws-c-common s2n-tls ]; </ins> propagatedBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [ Security ]; cmakeFlags = [

nativeBuildInputs = [ cmake ]; <del> propagatedBuildInputs = [ openssl ]; # s2n-config has find_dependency(LibCrypto). </del> <ins> outputs = [ "out" "dev"]; buildInputs = [ openssl ]; # s2n-config has find_dependency(LibCrypto). </ins> cmakeFlags = [ "-DBUILD_SHARED_LIBS=ON" <ins> "-DCMAKE_SKIP_BUILD_RPATH=OFF" </ins> ]; <ins> propagatedBuildInputs = [ openssl ]; # s2n-config has find_dependency(LibCrypto). postInstall = '' substituteInPlace $out/lib/s2n/cmake/shared/s2n-targets.cmake  --replace 'INTERFACE_INCLUDE_DIRECTORIES "''${_IMPORT_PREFIX}/include"' 'INTERFACE_INCLUDE_DIRECTORIES ""' ''; </ins> meta = with lib; { description = "C99 implementation of the TLS/SSL protocols"; homepage = "https://github.com/aws/s2n-tls";
Change:
Project description simplescreenrecorder is not that user-friendly and has problems (). right now i use OBS, but it's overkill for the task. maybe this is a good alternative Metadata homepage URL: source URL: license: GPL-3.0-or-later () platforms: linux, more?

Discussion:
<ins> { lib , python3 , fetchFromGitHub , appstream-glib , desktop-file-utils , gettext , glib , gobject-introspection , gtk3 , gst_all_1 , libnotify , librsvg , meson , ninja , pkg-config , slop , wrapGAppsHook }: python3.pkgs.buildPythonApplication rec { pname = "recapp"; version = "1.1.1"; format = "other"; src = fetchFromGitHub { owner = "amikha1lov"; repo = "RecApp"; rev = "v${version}"; sha256 = "08bpfcqgw0lj6j7y5b2i18kffawlzp6pfk4wdpmk29vwmgk9s9yc"; }; postPatch = '' patchShebangs build-aux/meson ''; nativeBuildInputs = [ appstream-glib desktop-file-utils gettext glib gtk3 meson ninja pkg-config wrapGAppsHook ]; buildInputs = [ libnotify librsvg gobject-introspection gtk3 gst_all_1.gst-plugins-base gst_all_1.gst-plugins-good gst_all_1.gst-plugins-bad gst_all_1.gst-plugins-ugly ]; propagatedBuildInputs = with python3.pkgs; [ pulsectl pydbus pygobject3 ]; dontWrapGApps = true; preFixup = '' makeWrapperArgs+=( "''${gappsWrapperArgs[@]}" "--prefix" "PATH" ":" "${lib.makeBinPath [ gst_all_1.gstreamer.dev slop ]}" ) ''; meta = with lib; { description = "User friendly Open Source screencaster for Linux written in GTK"; homepage = "https://github.com/amikha1lov/RecApp"; license = licenses.gpl3Plus; maintainers = with maintainers; [ dotlambda ]; }; } </ins>

reaper = callPackage ../applications/audio/reaper { }; <ins> recapp = callPackage ../applications/video/recapp { }; </ins> recode = callPackage ../tools/text/recode { }; reddsaver = callPackage ../applications/misc/reddsaver {