- Many dependencies of dev projects are simply source files which will be compiled on-the-fly. Or at least that's the case in the languages I normally work with.

- Some blobs are more trustworthy than others.