This is called vendorising your dependencies and is done because you can't/shouldn't rely on the third party server being available and serving the same version

This is called vendorising your dependencies and is done because you can't/shouldn't rely on the third party server being available and serving the same version of the source code to build your code.