a few things that were awkward that we've let slide so far: 1) remote modules are not fetched/cached independently of binaries (a bit like python i guess) and 2) test targets don't have sources... they just declare a test entrypoint for the module they depend on