I think most package managers take the repository urls from config, with typst its hardcoded in the binary (right?).