Not sure what your mean, Golang has solved this problem. Packages are not dependent on GitHub, and trust and namespacing is done by domain which works really well.