[ahoka]

That's kind of standard at big companies. Even at a small scale, it is beneficial to mirror every external dependency.

[shric]

The review part is the pain point far rather than the mirroring.

[johannes1234321]

It is a pain point, but relevant for legal liability and tracking security concerns, else you quickly have wild west where it's unclear what kind of problems affect which team and how