That said if I happen upon a possible dependency that's just one JS file and has a permissive license, I often do choose the copy-paste route.