[qznc]

I'm not sure about that. If you have dependencies to other internal repositories and to specific revisions, it is not clear who is responsible. Make can be agnostic, but Maven or NPM probably can not.

[pjmlp]

Maven surely can. You only depend on binary versions of Java libraries, no source code, as it should be.