11 slices of Nix-related goodness for your perusal
A live, public view of the CVEs we track in Determinate Secure Packages, the fixes we ship for them, and how much work that is.
The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and Determinate provide an industry-leading solution.
It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on
FlakeHub, our platform providing secure Nix binary caching, private flakes, and more, is now FedRAMP High authorized (Certification Class D under FedRAMP's 2026 Consolidated Rules) listed in the FedRAMP Marketplace, and available at flakehub.us, bringing enterprise Nix to federal agencies and contractors handling Controlled Unclassified Information
Making package cooldowns for Nixpkgs available to all Determinate users by default
It's lightning fast, it provides comprehensive metadata coverage, and it's the perfect complement to Determinate Secure Packages
Checking in on the current state of our supply chain efforts and an initial glance at FlakeBOM
Determinate Secure Packages 25.11 is now generally available, with security maintenance committed through May 2028.
A secure, signed, SLA-backed variant of Nixpkgs for teams who can't afford supply chain risk
Business-class Nix for critical infrastructure, complete with a flake stability guarantee
Fast, secure, configurable. A bold new take on Nix caching.
