<i>if you dig far enough, you can find some dependency of a dependency of dependency that relies on GitHub. Brew&#x2F;npm&#x2F;build script&#x2F;whatever</i><p>But really, why?<p>Is it just institutional laziness on the part of all developers?  We had reliable rsync CPAN mirrors in 1995.  In the early days of the Internet, companies would mutually <i>host secondary DNS for each other</i> to be more reliable. For some reason, we&#x27;ve forgotten all about reliability and disaster recovery and geographical distribution.  Now the collective programmer mindset with regards to global infrastructure seems to be &quot;lol, we&#x27;re too dumb to make things work, let&#x27;s just outsource everything to closed source, for-profit companies and hope for the best.&quot;