People don't think it's a great idea. In general, its just too much additional work/process - for very little benefit. You're far more likely to encounter a se

People don't think it's a great idea. In general, its just too much additional work/process - for very little benefit. You're far more likely to encounter a security issue from adding/upgrading a dependency than your build process requiring internet access.