I've spent much of my career on similarly, perhaps a little more, restricted networks and found the opposite. Dependencies are painful to pull in and only pull

I've spent much of my career on similarly, perhaps a little more, restricted networks and found the opposite. Dependencies are painful to pull in and only pulled in when a dev needs a specific version. The internal repos end up being a missing version nightmare where people cobble together whatever works with what's available. Where feature and security upgrades go ignored, left to rot like the brains of the devs who struggle to keep up with what's available in the real world. Many of those networks I've worked on are becoming more permeable at the edges because the cost of the air gap outweighs any benefits.