track progress on https://github.com/google/oss-rebuild/issues/660 native oss-rebuild work should be preferred once available