In the absence of this, we should have a very clear reference (e.g. repo + revision number) indicating where this source came from - perhaps in a Version.txt file or similar