Couple of problems with git.

In the enterprise, RBAC is a royal pain. You give out a URL and it's hard to know if the consumer can fetch it.

URLs are absolute, there is no resolution by name. Compounded further if you want transient dependencies (maybe not needed in this instance though).

In your project, you end up hardcoding the https/ssh scheme.