Yes that's fine, as long as it's something that can be traced to a reputable source, whether that is on some platform (e.g. BukkitDev, Spigot, Paper), or a specific person (e.g. Fundy, SethBling). Just want to make sure that the file is authentic (uploaded by its respective authors) rather than an unknown or modified copy with potentially malicious code.