It's only the package metadata (the spec) though, same as Homebrew, it's not like the package code is pushed to the repo.

Though I wonder if the actual project-fetching is similarly daft.