Best practices for adding external package sources?