Damus
LovesTha🄧 profile picture
LovesTha🄧
@LovesTha🄧
So I just had my nixos-rebuild fail due to the insecure nature of pnpm-10.29.2, which is fine.

The package triggering the inclusion of that pinned package is `vikunja-desktop`.

But I don't understand why the desktop application is being installed when I select `service.vikunja`, that is a webservice why is the electron app being installed too?

How do I trace from the #NixOS service option to what packages that causes to be installed?
1
hexa- · 4w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq30xlduvdu9xkdwcegrujvftepkm8p8agk9xjhyskezu4skx2snjsdy44rk The vikunja service does not in any way depend on the desktop app as far as I can tell. The vulnerable pnpm version was unpinned in https://github.com/NixOS/nixpkgs/pull/536772 a few ...