@vltpkg/graph 1.0.0-rc.32 → 1.0.0-rc.33

package/dist/dependencies.js

@@ -100,7 +100,9 @@ export const getDependencies = (node, options) => {
         const depType = shorten(type, name, node.manifest);
         const spec = Spec.parse(name, bareSpec, {
             ...options,
-            registry: node.registry,
+            // fall back to options.registry so deps don't lose the configured
+            // registry when the node itself has none. see vltpkg/vltpkg#1580.
+            registry: node.registry ?? options.registry,
         });
         res.set(name, {
             spec,

package/dist/graph.d.ts

@@ -85,6 +85,12 @@ export declare class Graph implements GraphLike {
      * Key format is internal and constructed in `ideal/peers.ts`.
      */
     peerContextForkCache: Map<string, PeerContext>;
+    /**
+     * Whether the options used to create this graph differ from the
+     * options stored in the lockfile it was loaded from. When true,
+     * the ideal builder must reset edges and rebuild the graph.
+     */
+    optionsChanged: boolean;
     /**
      * Tracks the current peer context index.
      */

package/dist/graph.js

@@ -23,9 +23,12 @@ const getResolutionCacheKey = (spec, location, extra) => {
     const fromPrefix = f.type === 'file' ? location + ' : ' : '';
     // the unique key should also precise what is the type of the spec,
     // and in the case of a registry, what registry it is from.
-    const typePrecisionKey = f.registry ?
+    const typePrecisionKey = f.registry || f.type === 'registry' ?
+        // registry-type specs always get a registry segment, even when
+        // no registry is configured, since findResolution trusts cache
+        // hits without re-running satisfies()
         `${cacheKeySeparator}registry` +
-            `${cacheKeySeparator}${f.registry}`
+            `${cacheKeySeparator}${f.registry ?? '<none>'}`
         : f.gitRemote ?
             `${cacheKeySeparator}git` + `${cacheKeySeparator}${f.gitRemote}`
             : `${cacheKeySeparator}${f.type}`;
@@ -93,6 +96,12 @@ export class Graph {
      * Key format is internal and constructed in `ideal/peers.ts`.
      */
     peerContextForkCache = new Map();
+    /**
+     * Whether the options used to create this graph differ from the
+     * options stored in the lockfile it was loaded from. When true,
+     * the ideal builder must reset edges and rebuild the graph.
+     */
+    optionsChanged = false;
     /**
      * Tracks the current peer context index.
      */

package/dist/ideal/append-nodes.js

@@ -371,7 +371,9 @@ const processPlacementTasks = async (graph, options, placementTasks, add, modifi
                         type: shorten(depTypeName, name, manifest),
                         spec: Spec.parse(name, bareSpec, {
                             ...options,
-                            registry: spec.registry,
+                            // git/file/remote parents have no spec.registry, so fall
+                            // back to the configured one. see vltpkg/vltpkg#1580.
+                            registry: spec.registry ?? options.registry,
                         }),
                     };
                     if (depTypeName === 'peerDependencies') {

package/dist/ideal/peers.js

@@ -27,7 +27,7 @@ const nodeSatisfiesSpec = (node, spec, fromNode, graph) => satisfies(node.id, sp
  */
 const parseSpec = (name, bareSpec, fromNode, graph) => Spec.parse(name, bareSpec, {
     ...graph.mainImporter.options,
-    registry: fromNode.registry,
+    registry: fromNode.registry ?? graph.mainImporter.options.registry,
 });
 /**
  * Generate a unique cache key for a peer context fork operation.
@@ -127,7 +127,7 @@ export const checkPeerEdgesCompatible = (existingNode, fromNode, peerContext, gr
     // Per-call memoization: avoid repeated satisfies() calls with identical args
     const parseOpts = {
         ...graph.mainImporter.options,
-        registry: fromNode.registry,
+        registry: fromNode.registry ?? graph.mainImporter.options.registry,
     };
     const fromLocation = fromNode.location;
     const projectRoot = fromNode.projectRoot;
@@ -481,7 +481,7 @@ export const startPeerPlacement = (peerContext, manifest, fromNode, options) =>
         // parent node that might have not been parsed yet
         const siblingDeps = getDependencies(fromNode, {
             ...options,
-            registry: fromNode.registry,
+            registry: fromNode.registry ?? options.registry,
         });
         for (const [depName, dep] of siblingDeps) {
             queueMap.set(depName, dep);

package/dist/ideal/refresh-ideal-graph.js

@@ -32,7 +32,9 @@ export const refreshIdealGraph = async ({ add, graph, modifiers, packageInfo, sc
         depsPerImporter.set(importer, deps);
     }
     // removes all edges to start recalculating the graph
-    if (add.modifiedDependencies || remove.modifiedDependencies) {
+    if (add.modifiedDependencies ||
+        remove.modifiedDependencies ||
+        graph.optionsChanged) {
         graph.resetEdges();
     }
     // iterates on the list of dependencies per importer updating

package/dist/install.d.ts

@@ -7,6 +7,8 @@ export type InstallOptions = LoadOptions & {
     packageInfo: PackageInfoClient;
     cleanInstall?: boolean;
     allowScripts: string;
+    saveExact?: boolean;
+    savePrefix?: string;
 };
 export declare const install: (options: InstallOptions, add?: AddImportersDependenciesMap) => Promise<{
     graph: Graph;

package/dist/install.js

@@ -94,8 +94,12 @@ export const install = async (options, add) => {
         }
         if (importerSpecs.add.modifiedDependencies ||
             importerSpecs.remove.modifiedDependencies ||
-            specChanges.length > 0) {
+            specChanges.length > 0 ||
+            lockfileGraph.optionsChanged) {
             const details = [];
+            if (lockfileGraph.optionsChanged) {
+                details.push('  Configuration options have changed (e.g. modifiers, registries, catalogs)');
+            }
             if (specChanges.length > 0) {
                 details.push(...specChanges);
             }

package/dist/lockfile/load.js

@@ -1,5 +1,7 @@
 import { error } from '@vltpkg/error-cause';
 import { PackageJson } from '@vltpkg/package-json';
+import { defaultGitHostArchives, defaultGitHosts, defaultJsrRegistries, defaultRegistries, defaultRegistryName, defaultScopeRegistries, } from '@vltpkg/spec';
+import { isRecordStringString } from '@vltpkg/types';
 import { Monorepo } from '@vltpkg/workspaces';
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
@@ -20,6 +22,79 @@ export const loadHidden = (options) => {
     options.throwOnMissingManifest = true;
     return loadObject(options, loadLockfile(projectRoot, 'node_modules/.vlt-lock.json'));
 };
+/**
+ * Removes entries from `items` that match the corresponding
+ * entry in `defaultItems`, returning only non-default values.
+ */
+const removeDefaultItems = (defaultItems, items) => {
+    const res = {};
+    for (const [key, value] of Object.entries(items)) {
+        if (!defaultItems[key] || defaultItems[key] !== value) {
+            res[key] = value;
+        }
+    }
+    return res;
+};
+/**
+ * Builds a normalized options object from the current runtime config
+ * using the same cleaning logic as `lockfile/save.ts` so that it can
+ * be compared directly against the options stored in a lockfile.
+ */
+const buildCurrentOptions = (options) => {
+    const hasItems = (o) => o && Object.keys(o).length > 0;
+    const cleanModifiers = (options.modifiers &&
+        isRecordStringString(options.modifiers.config)) ?
+        options.modifiers.config
+        : undefined;
+    const cleanRegistries = isRecordStringString(options.registries) ?
+        removeDefaultItems(defaultRegistries, options.registries)
+        : undefined;
+    const cleanScopeRegistries = isRecordStringString(options['scoped-registries']) ?
+        removeDefaultItems(defaultScopeRegistries, options['scoped-registries'])
+        : undefined;
+    const cleanJsrRegistries = isRecordStringString(options['jsr-registries']) ?
+        removeDefaultItems(defaultJsrRegistries, options['jsr-registries'])
+        : undefined;
+    const cleanGitHosts = isRecordStringString(options['git-hosts']) ?
+        removeDefaultItems(defaultGitHosts, options['git-hosts'])
+        : undefined;
+    const cleanGitHostArchives = isRecordStringString(options['git-host-archives']) ?
+        removeDefaultItems(defaultGitHostArchives, options['git-host-archives'])
+        : undefined;
+    return {
+        ...(hasItems(cleanModifiers) ?
+            { modifiers: cleanModifiers }
+            : {}),
+        ...(hasItems(options.catalog) ?
+            { catalog: options.catalog }
+            : {}),
+        ...(hasItems(options.catalogs) ?
+            { catalogs: options.catalogs }
+            : {}),
+        ...(hasItems(cleanScopeRegistries) ?
+            { 'scoped-registries': cleanScopeRegistries }
+            : undefined),
+        ...(hasItems(cleanJsrRegistries) ?
+            { 'jsr-registries': cleanJsrRegistries }
+            : undefined),
+        ...(options.registry !== undefined ?
+            { registry: options.registry }
+            : undefined),
+        ...((options['default-registry-alias'] !== undefined &&
+            options['default-registry-alias'] !== defaultRegistryName) ?
+            { 'default-registry-alias': options['default-registry-alias'] }
+            : undefined),
+        ...(hasItems(cleanRegistries) ?
+            { registries: cleanRegistries }
+            : undefined),
+        ...(hasItems(cleanGitHosts) ?
+            { 'git-hosts': cleanGitHosts }
+            : undefined),
+        ...(hasItems(cleanGitHostArchives) ?
+            { 'git-host-archives': cleanGitHostArchives }
+            : undefined),
+    };
+};
 export const loadObject = (options, lockfileData) => {
     const version = lockfileData.lockfileVersion;
     // Lockfile version is required, likely a corrupted lockfile if missing
@@ -44,12 +119,19 @@ export const loadObject = (options, lockfileData) => {
     const packageJson = options.packageJson ?? new PackageJson();
     const monorepo = options.monorepo ??
         Monorepo.maybeLoad(options.projectRoot, { packageJson, scurry });
-    const { catalog = {}, catalogs = {}, 'scoped-registries': scopedRegistriesOption, registry, registries, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives,
+    const { catalog = {}, catalogs = {}, 'scoped-registries': scopedRegistriesOption, registry, registries, 'default-registry-alias': defaultRegistryAlias, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives,
     /* c8 ignore next */
      } = lockfileData.options ?? {};
     // backwards-compat: legacy lockfiles wrote this field as `scope-registries`
     const scopeRegistries = scopedRegistriesOption ??
         lockfileData.options['scope-registries'];
+    // Detect whether the current config options differ from those
+    // stored in the lockfile.  When they do the ideal builder must
+    // reset edges and rebuild the graph.
+    const currentOptions = buildCurrentOptions(options);
+    /* c8 ignore next */
+    const lockfileOptions = lockfileData.options ?? {};
+    const optionsChanged = JSON.stringify(currentOptions) !== JSON.stringify(lockfileOptions);
     // Optimize options merging - only create new objects when needed
     const mergedOptions = {
         ...options,
@@ -59,6 +141,7 @@ export const loadObject = (options, lockfileData) => {
             { ...options['scoped-registries'], ...scopeRegistries }
             : options['scoped-registries'],
         registry: registry ?? options.registry,
+        'default-registry-alias': defaultRegistryAlias ?? options['default-registry-alias'],
         registries: registries ?
             { ...options.registries, ...registries }
             : options.registries,
@@ -74,6 +157,7 @@ export const loadObject = (options, lockfileData) => {
         mainManifest,
         monorepo,
     });
+    graph.optionsChanged = optionsChanged;
     loadNodes(graph, lockfileData.nodes, mergedOptions, options.actual, options.throwOnMissingManifest);
     loadEdges(graph, lockfileData.edges, mergedOptions);
     // hydrate missing node-level registry data

package/dist/lockfile/save.d.ts

@@ -24,7 +24,7 @@ export type SaveOptions = SpecOptions & {
      */
     throwOnMissingManifest?: boolean;
 };
-export declare const lockfileData: ({ graph, catalog, catalogs, "git-hosts": gitHosts, "git-host-archives": gitHostArchives, modifiers, registry, registries, saveManifests, saveBuildData, "scoped-registries": scopeRegistries, "jsr-registries": jsrRegistries, throwOnMissingManifest, }: SaveOptions) => LockfileData;
+export declare const lockfileData: ({ graph, catalog, catalogs, "git-hosts": gitHosts, "git-host-archives": gitHostArchives, modifiers, registry, registries, "default-registry-alias": defaultRegistryAlias, saveManifests, saveBuildData, "scoped-registries": scopeRegistries, "jsr-registries": jsrRegistries, throwOnMissingManifest, }: SaveOptions) => LockfileData;
 export declare const saveData: (data: LockfileData, fileName: string, saveManifests?: boolean) => void;
 export declare const save: (options: Omit<SaveOptions, "saveManifests">) => void;
 export declare const saveHidden: (options: Omit<SaveOptions, "saveManifests" | "saveBuildData">) => void;

package/dist/lockfile/save.js

@@ -1,5 +1,5 @@
 import { expandNormalizedManifestSymbols, isRecordStringString, } from '@vltpkg/types';
-import { defaultGitHostArchives, defaultGitHosts, defaultJsrRegistries, defaultRegistries, defaultRegistry, defaultScopeRegistries, } from '@vltpkg/spec';
+import { defaultGitHostArchives, defaultGitHosts, defaultJsrRegistries, defaultRegistries, defaultRegistryName, defaultScopeRegistries, } from '@vltpkg/spec';
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
 import { getFlagNumFromNode, getBuildStateFromNode, LOCKFILE_VERSION, } from "./types.js";
@@ -12,7 +12,10 @@ const formatNodes = (nodes, saveManifests, saveBuildData, registry, throwOnMissi
     const orderedNodes = arr.sort((a, b) => a.id.localeCompare(b.id, 'en'));
     const res = {};
     for (const node of orderedNodes) {
-        const customRegistry = node.resolved && registry && !node.resolved.startsWith(registry);
+        // when no registry is configured, nothing can be reconstructed on
+        // load, so every resolved value has to be persisted
+        const customRegistry = node.resolved &&
+            (!registry || !node.resolved.startsWith(registry));
         const resolved = customRegistry ? node.resolved : undefined;
         // if it's in a location other than the default, stash that
         const location = node.id.startsWith('file') || node.inVltStore() ?
@@ -82,7 +85,7 @@ const removeDefaultItems = (defaultItems, items) => {
     }
     return res;
 };
-export const lockfileData = ({ graph, catalog, catalogs, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives, modifiers, registry, registries, saveManifests, saveBuildData, 'scoped-registries': scopeRegistries, 'jsr-registries': jsrRegistries, throwOnMissingManifest, }) => {
+export const lockfileData = ({ graph, catalog, catalogs, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives, modifiers, registry, registries, 'default-registry-alias': defaultRegistryAlias, saveManifests, saveBuildData, 'scoped-registries': scopeRegistries, 'jsr-registries': jsrRegistries, throwOnMissingManifest, }) => {
     const cleanGitHosts = isRecordStringString(gitHosts) ?
         removeDefaultItems(defaultGitHosts, gitHosts)
         : undefined;
@@ -116,8 +119,10 @@ export const lockfileData = ({ graph, catalog, catalogs, 'git-hosts': gitHosts,
             ...(hasItems(cleanJsrRegistries) ?
                 { 'jsr-registries': cleanJsrRegistries }
                 : undefined),
-            ...(registry !== undefined && registry !== defaultRegistry ?
-                { registry }
+            ...(registry !== undefined ? { registry } : undefined),
+            ...((defaultRegistryAlias !== undefined &&
+                defaultRegistryAlias !== defaultRegistryName) ?
+                { 'default-registry-alias': defaultRegistryAlias }
                 : undefined),
             ...(hasItems(cleanRegistries) ?
                 { registries: cleanRegistries }

package/dist/reify/calculate-save-value.d.ts

@@ -1,2 +1,2 @@
 import type { Spec } from '@vltpkg/spec';
-export declare const calculateSaveValue: (nodeType: string, spec: Spec, existing: string | undefined, nodeVersion: string | undefined) => string;
+export declare const calculateSaveValue: (nodeType: string, spec: Spec, existing: string | undefined, nodeVersion: string | undefined, saveExact?: boolean, savePrefix?: string) => string;

package/dist/reify/calculate-save-value.js

@@ -1,5 +1,5 @@
-const SAVE_PREFIX = '^';
-export const calculateSaveValue = (nodeType, spec, existing, nodeVersion) => {
+const DEFAULT_SAVE_PREFIX = '^';
+export const calculateSaveValue = (nodeType, spec, existing, nodeVersion, saveExact, savePrefix) => {
     // Catalog specs should always be preserved as-is in package.json.
     // The catalog reference (e.g. "catalog:dev") is the user's intent;
     // the resolved version is tracked in the lockfile.
@@ -25,8 +25,9 @@ export const calculateSaveValue = (nodeType, spec, existing, nodeVersion) => {
             return existing;
         }
         else {
-            const finalRange = (spec.final.semver && spec.final.bareSpec) ||
-                `${SAVE_PREFIX}${nodeVersion}`;
+            const prefix = saveExact ? '' : (savePrefix ?? DEFAULT_SAVE_PREFIX);
+            const finalRange = (spec.final.semver && !saveExact && spec.final.bareSpec) ||
+                `${prefix}${nodeVersion}`;
             // didn't have dep previously, or depended on a different thing
             // than what was requested. Update with the ^ range based on
             // the node that landed in the graph, but preserve alias prefix

package/dist/reify/check-needed-build.js

@@ -43,7 +43,7 @@ const nodeNeedsBuild = (node, scurry, packageJson) => {
         return true;
     // Check for prepare scripts on importers or git dependencies
     const prepable = node.id.startsWith('git') || node.importer || !node.inVltStore();
-    const runPrepare = !!((scripts.prepare || scripts.preprepare || scripts.postprepare)
+    const runPrepare = !!(scripts.prepare || scripts.preprepare || scripts.postprepare
     /* c8 ignore next 2 */
     ) && prepable;
     if (runPrepare)

package/dist/reify/index.d.ts

@@ -16,6 +16,8 @@ export type ReifyOptions = LoadOptions & {
     modifiers?: GraphModifier;
     remover: RollbackRemove;
     update?: boolean;
+    saveExact?: boolean;
+    savePrefix?: string;
 };
 export type ReifyResult = {
     /**

package/dist/reify/index.js

@@ -111,7 +111,7 @@ export const reify = async (options) => {
 };
 const reify_ = async (options, diff, remover) => {
     const res = {};
-    const { add, remove, packageInfo, packageJson, scurry, allowScripts, } = options;
+    const { add, remove, packageInfo, packageJson, scurry, allowScripts, saveExact, savePrefix, } = options;
     const saveImportersPackageJson = 
     /* c8 ignore next */
     add?.modifiedDependencies || remove?.modifiedDependencies ?
@@ -120,6 +120,8 @@ const reify_ = async (options, diff, remover) => {
             remove,
             graph: options.graph,
             packageJson,
+            saveExact,
+            savePrefix,
         })
         : undefined;
     // before anything else happens, grab the ideal tree as it was resolved

package/dist/reify/update-importers-package-json.d.ts

@@ -27,9 +27,19 @@ export type UpdatePackageJsonOptions = {
      * instance used to load these `package.json` files previously.
      */
     packageJson: PackageJson;
+    /**
+     * When true, save dependencies with exact versions (e.g. `1.2.3`)
+     * instead of the default semver range operator (e.g. `^1.2.3`).
+     */
+    saveExact?: boolean;
+    /**
+     * The prefix to use when saving dependency versions (e.g. `^`, `~`, `>=`, ``).
+     * Defaults to `^` if not specified. Ignored when `saveExact` is true.
+     */
+    savePrefix?: string;
 };
 /**
  * Updates nodes of a provided {@link Graph} accordingly to the
  * provided add or remove arguments.
  */
-export declare const updatePackageJson: ({ add, graph, packageJson, remove, }: UpdatePackageJsonOptions) => () => void;
+export declare const updatePackageJson: ({ add, graph, packageJson, remove, saveExact, savePrefix, }: UpdatePackageJsonOptions) => () => void;

package/dist/reify/update-importers-package-json.js

@@ -10,7 +10,7 @@ const depTypesMap = new Map([
     ['peerOptional', 'peerDependencies'],
     ['optional', 'optionalDependencies'],
 ]);
-const addOrRemoveDeps = (nodeId, graph, addOrRemove) => {
+const addOrRemoveDeps = (nodeId, graph, addOrRemove, saveExact, savePrefix) => {
     const node = graph.nodes.get(nodeId);
     if (!node) {
         throw error('Failed to retrieve node', {
@@ -86,7 +86,7 @@ const addOrRemoveDeps = (nodeId, graph, addOrRemove) => {
             // If the manifest does not contain anything, then update it.
             // Only for registry dependencies
             const existing = dependencies[name];
-            const saveValue = calculateSaveValue(nodeType, dep.spec, existing, n.version);
+            const saveValue = calculateSaveValue(nodeType, dep.spec, existing, n.version, saveExact, savePrefix);
             dependencies[name] = saveValue;
             manifestChanged = manifestChanged || saveValue !== existing;
         }
@@ -97,7 +97,7 @@ const addOrRemoveDeps = (nodeId, graph, addOrRemove) => {
  * Updates nodes of a provided {@link Graph} accordingly to the
  * provided add or remove arguments.
  */
-export const updatePackageJson = ({ add, graph, packageJson, remove, }) => {
+export const updatePackageJson = ({ add, graph, packageJson, remove, saveExact, savePrefix, }) => {
     const manifestsToUpdate = new Set();
     const operations = new Set([add, remove]);
     for (const operation of operations) {
@@ -106,7 +106,7 @@ export const updatePackageJson = ({ add, graph, packageJson, remove, }) => {
             // that are nested folders from which the user can also add new
             // dependencies to
             for (const nodeId of operation.keys()) {
-                const manifest = addOrRemoveDeps(nodeId, graph, operation);
+                const manifest = addOrRemoveDeps(nodeId, graph, operation, saveExact, savePrefix);
                 if (manifest) {
                     manifestsToUpdate.add(manifest);
                 }

package/dist/transfer-data/load.js

@@ -1,11 +1,11 @@
 import { error } from '@vltpkg/error-cause';
 import { SecurityArchive } from '@vltpkg/security-archive/browser';
-import { defaultGitHostArchives, defaultGitHosts, defaultRegistries, defaultRegistry, defaultScopeRegistries, } from '@vltpkg/spec/browser';
+import { defaultGitHostArchives, defaultGitHosts, defaultRegistries, defaultRegistryName, defaultScopeRegistries, } from '@vltpkg/spec/browser';
 import { stringifyNode } from "../stringify-node.js";
 import { loadEdges } from "../lockfile/load-edges.js";
 import { loadNodes } from "../lockfile/load-nodes.js";
 const loadSpecOptions = (lockfile) => {
-    const { catalog = {}, catalogs = {}, registries, registry, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives, 'scoped-registries': scopedRegistriesOption, 'jsr-registries': jsrRegistries, } = lockfile.options;
+    const { catalog = {}, catalogs = {}, registries, registry, 'default-registry-alias': defaultRegistryAlias, 'git-hosts': gitHosts, 'git-host-archives': gitHostArchives, 'scoped-registries': scopedRegistriesOption, 'jsr-registries': jsrRegistries, } = lockfile.options;
     // backwards-compat: legacy lockfiles wrote this field as `scope-registries`
     const scopeRegistries = scopedRegistriesOption ??
         lockfile.options['scope-registries'];
@@ -13,7 +13,8 @@ const loadSpecOptions = (lockfile) => {
         catalog,
         catalogs,
         registries: { ...defaultRegistries, ...registries },
-        registry: registry || defaultRegistry,
+        registry,
+        'default-registry-alias': defaultRegistryAlias ?? defaultRegistryName,
         'jsr-registries': { ...jsrRegistries },
         'git-hosts': { ...defaultGitHosts, ...gitHosts },
         'git-host-archives': {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vltpkg/graph",
   "description": "A library that helps understanding & expressing what happens on an install",
-  "version": "1.0.0-rc.32",
+  "version": "1.0.0-rc.33",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/vltpkg/vltpkg.git",
@@ -13,26 +13,26 @@
     "url": "http://vlt.sh"
   },
   "dependencies": {
-    "@vltpkg/cmd-shim": "1.0.0-rc.32",
-    "@vltpkg/dep-id": "1.0.0-rc.32",
-    "@vltpkg/dss-breadcrumb": "1.0.0-rc.32",
-    "@vltpkg/error-cause": "1.0.0-rc.32",
-    "@vltpkg/fast-split": "1.0.0-rc.32",
-    "@vltpkg/graph-run": "1.0.0-rc.32",
-    "@vltpkg/init": "1.0.0-rc.32",
-    "@vltpkg/output": "1.0.0-rc.32",
-    "@vltpkg/package-info": "1.0.0-rc.32",
-    "@vltpkg/package-json": "1.0.0-rc.32",
-    "@vltpkg/pick-manifest": "1.0.0-rc.32",
-    "@vltpkg/query": "1.0.0-rc.32",
-    "@vltpkg/rollback-remove": "1.0.0-rc.32",
-    "@vltpkg/run": "1.0.0-rc.32",
-    "@vltpkg/satisfies": "1.0.0-rc.32",
-    "@vltpkg/security-archive": "1.0.0-rc.32",
-    "@vltpkg/spec": "1.0.0-rc.32",
-    "@vltpkg/types": "1.0.0-rc.32",
-    "@vltpkg/vlt-json": "1.0.0-rc.32",
-    "@vltpkg/workspaces": "1.0.0-rc.32",
+    "@vltpkg/cmd-shim": "1.0.0-rc.33",
+    "@vltpkg/dep-id": "1.0.0-rc.33",
+    "@vltpkg/dss-breadcrumb": "1.0.0-rc.33",
+    "@vltpkg/error-cause": "1.0.0-rc.33",
+    "@vltpkg/fast-split": "1.0.0-rc.33",
+    "@vltpkg/graph-run": "1.0.0-rc.33",
+    "@vltpkg/init": "1.0.0-rc.33",
+    "@vltpkg/output": "1.0.0-rc.33",
+    "@vltpkg/package-info": "1.0.0-rc.33",
+    "@vltpkg/package-json": "1.0.0-rc.33",
+    "@vltpkg/pick-manifest": "1.0.0-rc.33",
+    "@vltpkg/query": "1.0.0-rc.33",
+    "@vltpkg/rollback-remove": "1.0.0-rc.33",
+    "@vltpkg/run": "1.0.0-rc.33",
+    "@vltpkg/satisfies": "1.0.0-rc.33",
+    "@vltpkg/security-archive": "1.0.0-rc.33",
+    "@vltpkg/spec": "1.0.0-rc.33",
+    "@vltpkg/types": "1.0.0-rc.33",
+    "@vltpkg/vlt-json": "1.0.0-rc.33",
+    "@vltpkg/workspaces": "1.0.0-rc.33",
     "path-scurry": "^2.0.1",
     "promise-call-limit": "^3.0.2"
   },
@@ -83,5 +83,12 @@
   },
   "files": [
     "dist"
-  ]
+  ],
+  "bugs": [
+    {
+      "type": "link",
+      "url": "https://github.com/vltpkg/vltpkg/issues"
+    }
+  ],
+  "homepage": "https://github.com/vltpkg/vltpkg/tree/main/src/graph#readme"
 }