Well there's you're problem; you're using packages written and maintained in an unsustainably insecure way. It's been my experience that usually pull requests

Well there's you're problem; you're using packages written and maintained in an unsustainably insecure way. It's been my experience that usually pull requests which make a library capable of being built offline are welcome. Usually. So get off your duff and get to fixing the problems in the free packages you use.