While packages can certainly call hosted components via URL, I'm hard pressed to think of a use case where that is actually all that useful. Yes, versioning comes to mind, but for the effort to go through to maintain a hosted payload, why not modify the distribution? I guess I'm trying to ask more about your particular goal rather trying to advise on the end process.