10 slices of Nix-related goodness for your perusal
A live, public view of the CVEs we track in Determinate Secure Packages, the fixes we ship for them, and how much work that is.
The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and Determinate provide an industry-leading solution.
It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on
Making package cooldowns for Nixpkgs available to all Determinate users by default
Make this your most confident and secure Nixpkgs upgrade yet
It's lightning fast, it provides comprehensive metadata coverage, and it's the perfect complement to Determinate Secure Packages
Checking in on the current state of our supply chain efforts and an initial glance at FlakeBOM
Determinate Secure Packages 25.11 is now generally available, with security maintenance committed through May 2028.
The stars are aligning in unmistakable ways for Nix and we are leading the charge.
A secure, signed, SLA-backed variant of Nixpkgs for teams who can't afford supply chain risk
