Tag name is dangerous

[roberth]

{
  inputs.nixpkgs.url = "NixOS/nixpkgs/22.05";
}

Did you spot the security issue?

Let's replace the release tags by something descriptive, like 22.05-start or 22.05.0, so that users don't accidentally fail to update their packages.

[dasJ]

While I agree with the point in general, this particular example feels like a niv bug.
I wouldn't expect --branch to use a tag.

[roberth]

this particular example feels like a niv bug.

That's fair actually. I figured I'd add a non-flake example, but this is not it. Editing.