What if we could find all vendored versions of a dependency by grepping through the whole #NixOS cache? Well, now we can!
https://github.com/delroth/grep-nixos-cache hacked together last night + a few fixes and it's now running and finding (almost) all vendored libwebp versions in all NixOS packages \o/
Live output of the first run for those of you watching at home: https://seashells.io/v/pRRWxBhJ
@delroth I wonder about false negatives caused by compression. (Doesn't python modules distributed as egg files compress native libraries?)
@robryk I don't think they are kept as compressed egg files in the Nix store, but I could be wrong.
("compressed files" was counted in my "low false positive rates" estimate :p)
@delroth If I look at the mime types of all the things I have in my local store, there's lots of gzip. However, that seems to be:
- manpages, infopages,
- fonts, keymaps,
- entries in prefetched npm deps,
- sources, patches,
- some testfiles.
@robryk a string I expect to be uniquely found to libwebp ("no memory during frame initialization.")
There are of course many ways this could have false positives/negatives, but I expect the rates to be very low on the false positives side, and low on the false negatives side.