There, of course, is the Debian CLI Policy . This is a dry read, but is likely to clarify some details as to where some files will be downloaded.
I must admit, I still have some doubts after reading this, but the next step will probably be considered in the package sources of some CLI application already in the distribution, for example, keepass2.
Paulo
source share