For dependencies that don't require patches against upstream, it would be nice to manage the dependencies through Gradle rather than keeping the jars in our repo. But our long-term plan is to have reproducible builds, so every dependency should either be built from source or use an upstream binary with a reproducible build process. Find out whether this is possible with Gradle dependencies.