I don't know what you mean by impure package. You can modify the build of any nix package and it will rebuild everything just like Gentoo. I don't personally b

I don't know what you mean by impure package. You can modify the build of any nix package and it will rebuild everything just like Gentoo. I don't personally believe in the CFLAGS "performance" micro-optimization though so that's not really something that matters to me. Security is pretty hardened by default on Nix: https://nixos.org/manual/nixpkgs/stable/#sec-hardening-flags-enabled-by-default https://nixos.org/manual/nixpkgs/stable/#sec-hardening-flags...