{ stdenv
, pname
, version
, src
, meta
, unzip
, undmg
}:

stdenv.mkDerivation {
  inherit pname version src meta;

  nativeBuildInputs = [ unzip undmg ];

  sourceRoot = ".";

  installPhase = ''
    mkdir -p $out/Applications
    cp -r *.app $out/Applications
  '';

  # 1Password is notarized.
  dontFixup = true;
}