Are releases on GitHub public open source dependable?

Question

If an owner of a repo on GitHub decided to take the repo down one day, would the source still be available for my dependency manager to fetch? I assume GitHub doesn't keep back ups and make them available via re-direct?

Is it common practice to clone a repo and store it somewhere trustworthy before you link it as a dependency to your project?

Answer 1

这都是关于人工制品的，因为人工制品（Maven中央，Google Maven回购，Jitpack或其他任何东西）都保留了该人工制品，所以很好。