This also switches from the hacky vendor.sh script to managing the dependencies with nix.
Some details still have to be changed (see FIXME comments)