{ bubblewrap, lib, makeWrapper, python3, stdenvNoCC }:
stdenvNoCC.mkDerivation rec {
  name = "bwrap-helper";

  src = ./bwrap-helper.py;

  nativeBuildInputs = [
    makeWrapper
  ];

  buildInputs = [
    bubblewrap
    python3
  ];

  dontUnpack = true;
  dontBuild = true;
  installPhase = ''
    install -D $src $out/bin/bwrap-helper
  '';
  postFixup = ''
    wrapProgram $out/bin/bwrap-helper --prefix PATH : ${lib.makeBinPath buildInputs}
  '';

  meta.license = lib.licenses.mit;
}