Minimal repro of `poetry2nix` eval failure

README.md

Minimal reproduction of poetry2nix eval failure

$ git clone https://gist.github.com/d0455a67d4f6b37058de8406086ed388.git repro
$ cd repro

# Change `system = "aarch64-darwin"` on line 7 if you are on another platform
$ vim flake.nix

$ nix build
error: Package ‘python3.10-requests-2.28.2’ in /nix/store/i350z31lm6vgzmmy18bkfwcwwqag5hyw-source/pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/poetry.lock:0 is marked as insecure, refusing to evaluate.

       Known issues:
        - CVE-2023-32681

       [...]

flake.lock

{
  "nodes": {
    "nixpkgs": {
      "locked": {
        "lastModified": 1694937365,
        "narHash": "sha256-iHZSGrb9gVpZRR4B2ishUN/1LRKWtSHZNO37C8z1SmA=",
        "owner": "nixos",
        "repo": "nixpkgs",
        "rev": "5d017a8822e0907fb96f7700a319f9fe2434de02",
        "type": "github"
      },
      "original": {
        "owner": "nixos",
        "ref": "nixos-23.05",
        "repo": "nixpkgs",
        "type": "github"
      }
    },
    "root": {
      "inputs": {
        "nixpkgs": "nixpkgs"
      }
    }
  },
  "root": "root",
  "version": 7
}

flake.nix

{
  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.05";
  };

  outputs = {nixpkgs, self}: let
    system = "aarch64-darwin";
    pkgs = import nixpkgs { inherit system; };
  in {
    packages.${system}.default = pkgs.poetry2nix.mkPoetryApplication {
      projectDir = ./.;
    };

    devShells.${system}.default = pkgs.mkShell {
      name = "repro";
      buildInputs = [
        pkgs.poetry
      ];
    };
  };
}

poetry.lock

# This file is automatically @generated by Poetry 1.4.2 and should not be changed by hand.
package = []

[metadata]
lock-version = "2.0"
python-versions = "^3.10"
content-hash = "53f2eabc9c26446fbcc00d348c47878e118afc2054778c3c803a0a8028af27d9"

pyproject.toml

[build-system]
requires = ["poetry"]
build-backend = "poetry.masonry.api"

[tool.poetry]
name = "scratch"
version = "0.0.1"
description = "Repro"
authors = []

[tool.poetry.dependencies]
python = "^3.10"