[brirec]

Pretty good, but you might still want to defer to Homebrew to install some software. Nix-Darwin _can_ drive Homebrew and basically manage its packages declaratively.