This should use --prefer-source to prevent API failures.
The ones in res/ use --prefer-dist because they will use the GH token to up the hourly limit from 60 to 5000 requests.