feat(vendor,scan): lockfile-driven discovery + verified auto-fetch of missing packages#113

Closed

Mikola Lysenko (mikolalysenko) wants to merge 7 commits into

fix/vendor-uxfrom

feat/vendor-lockfile-fetch

Commits on Jun 11, 2026

feat(vendor): lockfile inventory module for npm-family locks

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(vendor): registry_fetch — verified pristine-artifact fetching

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(vendor,scan): auto-fetch missing packages + lockfile/ledger discovery

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(vendor): yarn berry checksum-verified fetch + ledger artifact staging tests

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(vendor): cargo + golang lockfile inventory and verified fetch

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(vendor): composer + gem + pypi lockfile inventory and verified fetch

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
feat(scan): all-ecosystem lockfile supplement + docs

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed