{
  lib,
  stdenv,
  buildDotnetModule,
  fetchFromGitHub,
  dotnetCorePackages,
  versionCheckHook,
  nix-update-script,
}:

buildDotnetModule rec {
  pname = "kryptor";
  version = "4.1.1";

  src = fetchFromGitHub {
    owner = "samuel-lucas6";
    repo = "Kryptor";
    tag = "v${version}";
    hash = "sha256-+pG3u4U3IZ6jw2p2f1jptX7C/qt0mPIcMG82XYtPzbs=";
  };

  dotnet-sdk = dotnetCorePackages.sdk_8_0;
  projectFile = "src/Kryptor/Kryptor.csproj";
  nugetDeps = ./deps.json;

  executables = [ "kryptor" ];

  doInstallCheck = true;
  nativeInstallCheckInputs = [ versionCheckHook ];

  passthru = {
    updateScript = nix-update-script { };
  };

  meta = {
    changelog = "https://github.com/samuel-lucas6/Kryptor/releases/tag/v${version}";
    description = "Simple, modern, and secure encryption and signing tool that aims to be a better version of age and Minisign";
    homepage = "https://github.com/samuel-lucas6/Kryptor";
    license = lib.licenses.gpl3Only;
    mainProgram = "kryptor";
    maintainers = with lib.maintainers; [
      arthsmn
      gepbird
    ];
    platforms = lib.platforms.all;
    # https://hydra.nixos.org/build/286325419
    # a libsodium.dylib file should be kept as per https://github.com/samuel-lucas6/Kryptor/releases/tag/v4.1.1
    # upstream issue: https://github.com/dotnet/sdk/issues/45903
    broken = stdenv.hostPlatform.isDarwin;
  };
}