The library should be added to the project in one way or another.
Ideally there were some safe guards, to ensure the file was not tempered with.
This may include:
- comparing file hashes against known references (how? as test?)
- a lot more tests
The library should be build via Gitian, or extracted from the official release.