I thought of Nix while reading this thread and I'm wondering what makes it unique here? As a daily NixOS user I get that it is better but I don't know the specifics. the nixpkgs rpeo is superficially similar to homebrew (lots of people submitting packages, running on github, automation around commits).
What are the differences wrt to security?
1. It's language, Nix, is limited in scope?
2. No automated PR merge workflows (yet)?
3. Better community/engineering/security?