Secrets

is it possible not to reference nixpkgs for every special occasion? given that nix-exec has a tiny repo that can have it compiled in place, we end up with at least two nixpkgs references here