4 ms·

The hardwiring of dependencies in a Nixpkg-based deployment seems to be good for generating SBOMs. Cf. https://discourse.nixos.org/t/generating-software-bill-o

• ciupicri 4y ago
  Assuming you're using only Nixpkg and not doing pip install, npm install, cargo install and so on like many people suggest and do.