Xash3D is not really open-source. The original codebase comes from leaked/decompiled code, and nowadays still requires the proprietary HLSDK to build.