NixOS Reproducible Builds: minimal ISO successfully independently rebuilt
Now if only they would have maintainers and reviewers sign packages like almost every other linux distribution has done since the 90s, so we have any idea if the code everyone is building is even the right code.Until signing is standardized, it is hard to imagine using nix in any production use case that protects anything of value.