[wmf]

loads code from the internet and runs it no questions asked

Like every "modern" package manager? I think that's a lost cause.

[Snelius]

What about versions of that url based packages?