[colechristensen]

Upstream projects likely used source control, but the packages used published artifacts (tarballs) which were released by the upstream project.

It's a statement that gives false impressions, the reality isn't very interesting.