Artiflakery, an easy way to distribute static Nix flake artifacts

NixOS and reproducible builds could have detected the xz backdoor

Is NixOS truly reproducible?