[samb1729]

> aside from hobbyists everyone who seriously develops software caches all dependencies in a own repository like nexus etc.

This is a bold claim to make, and one that isn’t supported by my personal observations. Many ‘serious’ software developers have no such intermediate repository for their dependencies.

[pskinner]

We did and so this didn't cause us a major issue today.

At my lost job we had the same.

And the one before that.

This mitigation of a risk that affects business continuity is something that all senior level people need to take seriously at any company, small or large.