This is a really bad idea. Being able to decide how a dependency gets pulled in for a library you depend on is a blessing, especially when you have to lock versions down. This only works for something like loading JavaScript files, where you can assume only roughly 6 concurrent connections per server are allowed, so you use CDNs more.