Embed Notice

@djlink The whole package manager approach is so volatile. Not only are there connection risks, but also random breaking changes and even the possibility of stuff disappearing or an update introducing malware.

I’ve seen big projects set up their own package sources/cache servers just to have a bit more control over the madness. Any experienced developer will also use exact version numbers for the references to prevent bad surprises.