It’s open source: If the government’s are willing to pay people to fork the original and vet and merge all the future deltas then they just need to host their own package manager. But would developers trust a government managed set of packages? In the US that is doubtful (I’d assume at some point FBI, CIA, NSA, DOD do something dishonest with it at some point.)
The monetary system is fracturing, now the open source system could be fracturing.
If I was Russia, I might start seeing the need to develop in-country versions of open source packages, as a matter of national security.