Don't forget language specific package repositories like python's pip.
Few days ago I wanted to install a software which was freely licensed, and it said install it via pip. Of course I'd not, so I decided to package it for guix. When trying to package it, I noticed there's a non free dependency in it!
I wonder how many people had installed that nonfree dependency even without realising it, thinking they were installing FreeSoftware.