The process will be different for each organisation.

It may be anywhere from "Oh, we didn't realize you needed that, here is a change to the FW rule" to "Provide a risk analysis for each version of each module that you will need (and dependencies) and we will stash it in a corporate CPAN environment that you can use" to "Not on your life - intertubes bad" (ok, some places that is a valid stance, but I have seen it be just an "easier to block this than deal with it safely") approach.

Communication with management about this stuff is good. If you can present it in a cost/value type of comparison, then management can do their job and either buy in, or reject it. If not authorized to make a decision yourself, all that you can do (well, legitimately) is provide information to those that are. There may be a valid risk that you have not yet considered, or a benefit that they have not.

Good luck!