Determinate Secure Packages distribution
secure-packages-25.05Emergency Legacy Extension
NixOS 25.05 reached its end of life on December 31, 2025. If you're not in a position to upgrade to a later distribution yet, our Emergency Legacy Extension keeps about a thousand packages at the core of a production NixOS system patched through at least the fourth quarter of 2027.
CVE remediation under an SLA once intake is done, full FlakeHub Cache coverage, CycloneDX SBOMs with FlakeBOM, cryptographically signed packages, and more.
What's included
CVE remediation under an SLA (opens in a new tab)
Once intake is done, we remediate CVEs in the covered packages on a service-level agreement.
docs.determinate.systems
FlakeHub Cache (opens in a new tab)
Full FlakeHub Cache coverage, so your systems fetch the patched builds rather than building them.
flakehub.com
CycloneDX SBOMs with FlakeBOM (opens in a new tab)
Software bills of materials, generated by FlakeBOM.
docs.determinate.systems