Move to source and patches instead of classes

[GeorgLippold]

It would be great if victims could be used for virtually any open source project. Many projects pull libraries from multiple repositories, and integrate them into the final product, just like Java projects use Java libraries. The idea behind victims should be applied to all opensource projects so that developers can be notified if a critical vulnerability exists in one of the libraries that they're using and then trigger an update (e.g. a git pull / svn checkout) automatically.