package updater: use transactions where possible
package updater: instantiate patched derivations to be able to build them later quickly
patch builder: decrease log noise
package updater: reduce log noise in CVE matching code
build system: wrap executables to not take any runtime dependencies from the environment except for system Nix
web interface: properly encode url parameters in /pd (package details)
package update: turn off output buffering to make messages appear in the expected order
build system: clean up PATH= value
readme: improve database description, fix installation instructions, add mention of nixos module.
nixos module: initial commit
web interface: add help file for users
documentation: fix minor typo
nixos module: fix missing ssl certificates
package updater: build patches using nix-store --realise instead of nix-build.

Derivations for all patches are created by the patch generator. This allows
concurrent building of multiple patches since the builder no longer needs a
patched nixpkgs copy to start a build.
package updater: convert the log to ascii only once
package updater: fix prefetching of mirror:// urls
web interface: add "with patch" filter param
Allow to override fresh Nix src
Documenting my first attempt to use nixpkgs-monitor for a localised task.
Remove obsolete requirement note