True, but internal dependencies aren’t upstream. I care very little how a project is laid out on disk before it’s built unless I’m going to work on the source.

All the cargo deps would be "upstream", and pulled on build.