Taking one
nestera packs <name> --into ./mine leaves a directory you can run and then change: the sources as well as the compiled graphs, and a pack.lock naming the exact bytes you took.
That lock is the difference between a copy and this copy. A hash names one immutable sequence of bytes for all time, so a pack pinned to those hashes is pinned to behaviour rather than to a name somebody else controls — nothing upstream can change what you installed, and you choose when to take a newer one.