The risk is adding yet another dependency controlled by a third party that executes on your developer’s local machines and on your CI system.