the idea being you’d run a resolver at the time of creating your BUILD file and it’d spit out a set of static

http_file

type deps pointing to a specific URL@SHA