Open source package repositories face sustainability crisis (opens in new tab)

There should be more talk about keeping local copies of all dependencies and updating them once per organization as needed, and then all other CI/CD pulls from that local copy.