Sure. People who do that are going to be reimplementing lots of stuff on their own and creating libraries, so they might as well leverage the work of the community.

People need to vendor their 3rd-party libraries and audit them regularly.