@melix @britter basically the project has an update script that runs mitm-cache to snoop network calls and then runs a Gradle task to effectively force all configurations to resolve and to download the dependencies in them, at the end of which we can get a final view of everything the build requested and put it into something Nix calls a fixed-output derivation. This FOD is then provided to the actual build as an input and dependencies are retrieved from it.