Function load 

pub async fn load(
    project_root: &Path,
    trusted: bool,
    offline: bool,
    global: bool,
) -> Loaded

What chest gives a run of yapi in project_root: the project manifest, only when trusted, and the user’s global one, only when global, each when it installs anything. Each puts back what its lock pins and is missing, unless offline, and skips stale or unlocked entries with a warning. It never writes a lock or .gitignore.