It's the same that we're doing for external crates in QEMU's experiments with Rust. Each new dependency is added to the build by hand.