In a corporate environment this may lead to accidential violations of Contracts. Usually code isnt allowed to leave the corporate network. So one day poor joe updates his favourite autocomplete plugin, the next day he violated a contract