I won’t knock anyone that does that, especially short term, since vendoring your libraries prevents build time dependencies outside of your control. But long te

I won’t knock anyone that does that, especially short term, since vendoring your libraries prevents build time dependencies outside of your control. But long term it might be worth looking at the NPM registry proxies that are out there.