As it appears there is clearly no any kind of agreement on what to do with repositories and dependencies, perhaps it would be best to drop the requirement from the spec and revisit it later?