Comment by wrs

Pulling dependencies from GitHub is standard usage for the package managers of Ruby, Go, Rust, and others. That is, they pull from Git, and it doesn’t have to be GitHub but it usually is.