diff --git a/lib/default.nix b/lib/default.nix
index a7437a2..b6525f1 100644
--- a/lib/default.nix
+++ b/lib/default.nix
@@ -12,5 +12,6 @@ let
     attrsets = callLibs ./attrsets.nix;
     types = callLibs ./types.nix;
     debug = callLibs ./debug.nix;
+    derivations = callLibs ./derivations.nix;
   });
 in myLib
diff --git a/lib/derivations.nix b/lib/derivations.nix
new file mode 100644
index 0000000..7c59d6b
--- /dev/null
+++ b/lib/derivations.nix
@@ -0,0 +1,15 @@
+{lib, myLib, ...}:
+with lib;
+rec {
+  isBroken = x:
+    let
+      tryX = builtins.tryEval x;
+    in
+      if
+        tryX.success && (isDerivation tryX.value)
+      then
+        tryX.value.meta.insecure || tryX.value.meta.broken
+      else   
+        true
+    ;
+}