Dependencies tools

A lockfile is a map of everything your build trusts, and a private one names your internal registry — which is why these run in your tab rather than on someone else’s server. It is also thousands of lines nobody reads, which is how a change that matters gets merged unnoticed.