[sunnyday_002]

So the lockfile is a superset, but never a subset?

So it basically is an SBOM then but just sometimes has extra dependencies?

[matharmin]

Superset of dependencies, but often a subset of info per depedency.

[sunnyday_002]

Ah okay! I know Rust has the transitive dependencies did not think/realise all languages might not, good point!