Our build tools and overall approaches need to focus on reproducibility, offline builds, bundling of all dependencies (including source code when available) wit

Our build tools and overall approaches need to focus on reproducibility, offline builds, bundling of all dependencies (including source code when available) with release artifact. I think that big companies already have it with some tooling, but small companies usually use what's available off the shelf in default configuration and those practices are not very reliable when it comes to rogue dependencies changes.