https://github.com/Microsoft/vcpkg

Pros:

• Developers no longer have to trust the pre-compiled package maintainer (= me!) not to put malicious things in the pre-compiled opaque binary blob
• Developers (including me) will automatically have an access to the latest version of dependent libraries
  • Pre-compiled libraries are built manually and aren't updated for quite a long time.

Cons:

• Developers have to trust Microsoft and the ecosystem
• Extra step for installing vcpkg