we source all of our artifacts from an internal binary store, so we also have quite a bit more control on the surface area of whats exposed to the resolver to begin with vs resolving directly from pypi