Yes, of course. A centralized repository for a package manager is always going to be a single point of failure.