Recently got turned on to cachito and how it can be used to fetch upstream sources for pip, gomod, and npm vendoring DIRECTLY into brew/osbs builds w/o the need for jenkins prebuilds and asset pushes to pkgs.devel.

https://source.redhat.com/groups/public/container-build-system/container_build_system_wiki/containers_from_source_multistage_builds_in_osbs#jive_content_id_imagebuilder

If we're going to revisit how we build the 3rd party parts of CRW (CRW-2370, CRW-2371) perhaps we could also look at cachito to build these bits in a more Red Hat Prod Sec Supply Chain cimpliant way?