More importantly, the project descriptions, like bundler's Gemfile, is a local decryption of the dependencies. And this allows you to have project scope libs, instead of system scope libs.