> That would work for Npm. Npm has enough problems that its worth running your own mirror for business continuity.

And risk-averse businesses do already.