···

       
89
       
89
       
 
       
    allowInsecurePredicate attrs ||

     

       
90
       
90
       
 
       
    builtins.getEnv "NIXPKGS_ALLOW_INSECURE" == "1";

     

       
91
       
91
       
 
       


     

       
92
       
92
       
-
       
  hasSourceProvenance = attrs:

     

       
93
       
93
       
-
       
    attrs ? meta.sourceProvenance;

     

       
94
       
92
       
 
       


     

       
95
       
93
       
 
       
  isNonSource = sourceTypes: lib.lists.any (t: !t.isSource) sourceTypes;

     

       
96
       
94
       
 
       


     

       
97
       
95
       
 
       
  hasNonSourceProvenance = attrs:

     

       
98
       
98
       
-
       
    hasSourceProvenance attrs &&

     

       
96
       
96
       
+
       
    (attrs ? meta.sourceProvenance) &&

     

       
99
       
97
       
 
       
    isNonSource (lib.lists.toList attrs.meta.sourceProvenance);

     

       
100
       
98
       
 
       


     

       
101
       
99
       
 
       
  # Allow granular checks to allow only some non-source-built packages