Not quite, but you can programmaticaly construct a package with dependencies whose source is crates.io (just ignoring the path parameter), and then it’ll pull them all from crates.io. This is how cargo package works.
Yes!
Hey once you’re using Cargo’s API all bets are off 