New review comment by Gottox on void-packages repository

https://github.com/void-linux/void-packages/pull/28510#discussion_r570862590

Comment:
The upstream supports tar.gz snapshots of revisions now. We should use this for fetching the binaries instead.

Also I just remembered why I chose to not depend on a named revision, like a tag or a branch. This allows the upstream to change the revisions content without any notice. With a commit hash we have a cryptographic proof of authenticity.