New review comment by sgn on void-packages repository

https://github.com/void-linux/void-packages/pull/25753#discussion_r508910513

Comment:
Looking around, I think if `ccache` don't use those fancy  `ExternalProject`, we should be fine.

The whole `curl`, `libarchive`, `rhash`, `expat` and `nghttp2` was added for fetching tarball from external resource, verify checksum and build them.