The use of libs-snapshot causes 401 responses if the bom references dependencies that aren't in the repo.

/cc @marcingrzejszczak