Use vendored sources

[sneurlax]

• Vendor https://github.com/mrcyjanek/randomwow
• Make sure stack_wallet points to vendored repos.
• Doublecheck for more repos to mirror (or at least pin to a commit hash).

[MrCyjaneK]

If you add monero_c as a git submodule (as it is added currently) it is getting pinned to current hash, including all scripts and patches in that repo - so it is already pinned

[sneurlax]

It is added like so:

https://github.com/MrCyjaneK/stack_wallet/blob/monerodart/.gitmodules#L7-L10

So changes could be pushed to #rewrite-wip after the review and those changes could reach end users without review.

There would be less of an issue if we used the current-latest commit hash on rewrite-wip

[MrCyjaneK]

This is just source information, actuall pinned hash can be seen here: https://github.com/cypherstack/stack_wallet/pull/831/files#diff-40feb834325610129faed3d162eb16258d73b063549934dae33dde4a61c775e8

it is being pinned to hash 738608....., so no matter what I push to the branch it will checkout that commit.

[sneurlax]

Right you are! Then this may be closed