See my comment in the PR-description:

> I don't like the fact that the localhost archive is in the source, but I don't see any better way around it.

Since we run carton as an external process, it will be hard to "inject" the localhost source.