error: … while calling the 'derivationStrict' builtin at «nix-internal»/derivation-internal.nix:37:12: 36| 37| strict = derivationStrict drvAttrs; | ^ 38| … while evaluating derivation 'nix-shell' whose name attribute is located at «https://releases.nixos.org/nixos/26.05/nixos-26.05.12192.8ce73368d1ef/nixexprs.tar.xz?narHash=sha256-fgbb%2BlnywgXIYBCe0u3OxyebrCN1z8kfFhXH1dyv93A%3D»/pkgs/stdenv/generic/make-derivation.nix:647:11 … while evaluating attribute '__impureHostDeps' of derivation 'nix-shell' at «https://releases.nixos.org/nixos/26.05/nixos-26.05.12192.8ce73368d1ef/nixexprs.tar.xz?narHash=sha256-fgbb%2BlnywgXIYBCe0u3OxyebrCN1z8kfFhXH1dyv93A%3D»/pkgs/stdenv/generic/make-derivation.nix:816:11: 815| unique (computedPropagatedSandboxProfile ++ [ propagatedSandboxProfile ]); 816| ${if buildIsDarwin then "__impureHostDeps" else null} = | ^ 817| let (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Refusing to evaluate package 'pnpm-10.34.0' in /nix/store/yqlqyj2bswr8fsmkgdzz5hfqprswigr4-source/pkgs/development/tools/pnpm/generic.nix:170 because it is marked as insecure Known issues: - CVE-2026-55487 - CVE-2026-55698 - CVE-2026-55180 - CVE-2026-55697 - CVE-2026-59194 - CVE-2026-59195 - CVE-2026-59196 - CVE-2026-82392 - CVE-2026-82393 You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘pnpm-10.34.0’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "pnpm-10.34.0" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘pnpm-10.34.0’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "pnpm-10.34.0" ]; }