pub fn sync(
dir: &Path,
doc: &Value,
detail: PackumentDetail,
) -> Result<Vec<Resolved>>Expand description
Make package-lock.json + node_modules/ a function of the manifest: write a fresh v3 lockfile
from the resolved registry dependency tree (licenses per detail), then install from it (every
tarball’s sha512 verified). Returns the installed packages. Non-registry deps (git/file:) are
recorded in the manifest but not resolved.