Exactly. For some build systems (ex: Maven or NPM) you can have a local proxy the mitigate a lot of this. It also has the advantage of having a fixed (hopefully validated!) set of dependencies instead of pulling it whatever wild-wild-west change there is in the latest version of something. It also insulates you from the historical changes.