Yes, unfortunately they don't all tag. One solution may be to setup an organization and we can for every repo we depend on and tag, but it seems just as bad as this solution =/