Why yes, depending on a third-party, external package manager is a huge risk. I have always believed that open source projects should be fully inclusive of any

Why yes, depending on a third-party, external package manager is a huge risk. I have always believed that open source projects should be fully inclusive of any and all dependencies. This event has not changed that opinion.