The authors of puppet-librarian introduced a new and lovely bug in 1.0.8 screwing up local sources for modules, so don't use that