3 ms·

This is called "vendoring" and any package manager that doesn't totally suck supports it, including cargo.