&quot;It just so happens, though, that people&#x27;s build scripts and package managers like to refresh packages from the root and don&#x27;t handle failures modes of that operation very well. &quot;<p>That&#x27;s the critical part. So, countering this risk is apparently a manual thing if one uses off-the-shelf tooling for Git. I&#x27;ll just have to remember to look at that if I do a deployment. Put it on a checklist or something.