Something like this is what we desperately need. Immutable repository SHA's we can bake into dependencies.
Though IPFS might be less of an impedance mismatch.
Though IPFS might be less of an impedance mismatch.
NixOS is great, but if someone pulls the repos for the source packages of somethings in NixOS... you're just completely out of luck.
But if you know the hash, and someone in IPFS still has it available....