error: … while evaluating a branch condition at «string»:25:5: 24| v: 25| if !builtins.isAttrs v || isDrv v then | ^ 26| v … in the left operand of the OR (||) operator at «string»:25:28: 24| v: 25| if !builtins.isAttrs v || isDrv v then | ^ 26| v … while evaluating the option `system.build.toplevel': … while evaluating definitions from `/nix/store/02h6ym8j8qvxpjps56n9gx4gxqpg26a0-source/nixos/modules/system/activation/top-level.nix': … while evaluating the option `warnings': … while evaluating definitions from `/nix/store/02h6ym8j8qvxpjps56n9gx4gxqpg26a0-source/nixos/modules/system/boot/systemd.nix': … while evaluating the option `systemd.services.netbox.serviceConfig': … while evaluating definitions from `/nix/store/02h6ym8j8qvxpjps56n9gx4gxqpg26a0-source/nixos/modules/system/boot/systemd.nix': … while evaluating the option `systemd.services.netbox.preStart': … while evaluating definitions from `/nix/store/02h6ym8j8qvxpjps56n9gx4gxqpg26a0-source/nixos/modules/services/web-apps/netbox.nix': (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Refusing to evaluate package 'python3.14-python-jose-3.5.0' in /nix/store/lfxfs67a9svbknbk0krvzyrki4nmgqkk-source/pkgs/development/python-modules/python-jose/default.nix:62 because it is marked as insecure Known issues: - CVE-2026-120459 You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘python3.14-python-jose-3.5.0’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "python3.14-python-jose-3.5.0" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘python3.14-python-jose-3.5.0’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "python3.14-python-jose-3.5.0" ]; }