Determinate Secure Packages: Nixpkgs with SBOMs, FIPS, and SLA'd CVE Patching | Dark Hacker News