That's a good point. It's way more resource-intensive and much slower, which is why it's not preferred in Nixpkgs, for example. But it's also vulnerable to th

That's a good point. It's way more resource-intensive and much slower, which is why it's not preferred in Nixpkgs, for example. But it's also vulnerable to the same problem in that your package manager's build system is still dependent on GitHub. It will take more to screw you up, but a whole GitHub outage, for example, will definitely still hurt.