New review comment by Johnnynator on void-packages repository

https://github.com/void-linux/void-packages/pull/31658#discussion_r659166811

Comment:
The way this package uses git is a no-go. git repos should never be downloaded at build time.
Similiar with `wget`, every file fetched should preferably be in distfiles and have a checksum, the build scripts do no even try to verify if a downloaded file is correct/didn't change.