Function duplicates 

pub fn duplicates(
    installed: &Installed,
    settings: &SettingsManager,
    keep: Option<&ProjectOnly>,
    agent_dir: &Path,
) -> Vec<(String, String)>

The warnings, by manifest path, for each copy of a package that a run leaves out because another source installs it too, as LeftOut decides. Their yapi remove -l commands take --approve unless the project of settings is trusted without it, by the decisions in agent_dir or the global defaultProjectTrust.