Really? I was under the impression that most language package managers downloaded from a CDN. I know that pip, npm, yarn, cargo, and hex do, at least.
I think it's somewhat common for a new package manager to use Github as a kind of CDN for a while, until they get big enough they can do their own.