Which is as terrible idea. You have some code deployed, and suddenly this code
downloads random things from internets without any control whatsoever.
Even worse if the application was deployed behind firewall and can't access internet freely.
Even worse if the application was deployed behind firewall and can't access internet freely.
Plugins are plugins and dependencies are dependencies. Don't mix them up.