Package repositories go down too (Maven, RubyGems, NPM, etc...).
Unless by 'lax' you mean 'didn't check in your dependencies'...I don't think I'd call that lax, though.
Re:Please stop breaking the build
by ForHackernews on Sunday March 15, 2015 @02:29PM
(#9207456)
At my work, we run a local mirror/proxy for dependencies. It's polite because we're not hitting those external services as frequently, and it has the advantage that we aren't reliant on them to produce builds.
It shouldn't unless you've been lax in how you specify your dependencies, or the library maintainers have been sloppy in what they claim for backwards-compatibility.
Obviously in the real world, both of those things happen.