Re: Hear fucking hear!
If your doing it right, the 'package managers' (Maven etc) won't have any external access, everything they 'download and install' is from an internal repository, such as Artifactory, where the contents have (hopefully) been checked and validated before being added.