I can imagine that works for most cases, but when you try to include some lesser known and obscure library, that is heavily typosquatted, you might run into issues.