bc what every package manager needs is more config flags to keep track of... meanwhile, security updates are still taking months to land https://haskellforall.com/2026/06/ergonomic-overrides-for-nixpkgs