Notably, this is still cutting out the middleman and bypassing the extra review that that entails. It's fine as long as you trust everybody involved in publishing the repo, which is probably fine here, but a thing to keep in mind.