package updater: use transactions where possible
package updater: instantiate patched derivations to be able to build them later quickly
patch builder: decrease log noise
package updater: reduce log noise in CVE matching code
build system: wrap executables to not take any runtime dependencies from the environment except for system Nix
web interface: properly encode url parameters in /pd (package details)
package update: turn off output buffering to make messages appear in the expected order
build system: clean up PATH= value
readme: improve database description, fix installation instructions, add mention of nixos module.
nixos module: initial commit
web interface: add help file for users