From 682ebd4c247ead40380536d2670a6ee11f387974 Mon Sep 17 00:00:00 2001
From: Jan-Bulthuis <git@bulthuis.dev>
Date: Fri, 23 Oct 2026 00:49:57 +0200
Subject: [PATCH] fix: allow some insecure packages

---
 glue/default.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/glue/default.nix b/glue/default.nix
index fd8253a..40f0db7 100644
--- a/glue/default.nix
+++ b/glue/default.nix
@@ -9,6 +9,18 @@ let
 
   nixpkgs-config = {
     allowUnfree = true;
+
+    permittedInsecurePackages =
+      let
+        insecurePackages = [
+          "electron-39.8.10"
+          "pnpm-10.34.0"
+        ];
+      in
+      if builtins.length insecurePackages > 0 then
+        lib.trace "Allowing [${lib.strings.join ", " insecurePackages}] which is/are insecure" insecurePackages
+      else
+        [ ];
   };
 
   importDir =