At the moment there is a `vendor-hotfix` directory used for Box. Box should be upgraded ASAP in order to avoid requiring such patches.