What if we could find all vendored versions of a dependency by grepping through the whole #NixOS cache? Well, now we can!

github.com/delroth/grep-nixos- hacked together last night + a few fixes and it's now running and finding (almost) all vendored libwebp versions in all NixOS packages \o/

Live output of the first run for those of you watching at home: seashells.io/v/pRRWxBhJ

@robryk a string I expect to be uniquely found to libwebp ("no memory during frame initialization.")

There are of course many ways this could have false positives/negatives, but I expect the rates to be very low on the false positives side, and low on the false negatives side.

Follow

@delroth I wonder about false negatives caused by compression. (Doesn't python modules distributed as egg files compress native libraries?)

@robryk I don't think they are kept as compressed egg files in the Nix store, but I could be wrong.

("compressed files" was counted in my "low false positive rates" estimate :p)

@delroth If I look at the mime types of all the things I have in my local store, there's lots of gzip. However, that seems to be:
- manpages, infopages,
- fonts, keymaps,
- entries in prefetched npm deps,
- sources, patches,
- some testfiles.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.