If your project is using an open source component then it is better to get the source code of the corresponding version of the open source component and have it in your configuration management system. This will help you to fix any minor bugs quickly and not have to wait until the owner of the project releases a patch or new version.