[Fethbita]

I had issues with exactly this method. One of my dependencies was pulled off to a paid model so my project no longer worked.

[mrbungie]

Anyone remember the leftpad fiasco in the node ecosystem? That could happen in any dependency system that allows owners to unpublish dependencies and that's one risk users must weigh when adding them.