Fix npm/Bun VEX attesting a patch a same-lock copy skips (#588) - #589

Open

Mikola Lysenko (mikolalysenko) wants to merge 7 commits into

mainfrom

agent/fix-npm-same-lock-unwired-copy

Commits on Oct 2, 2026

Start fix for #588
Claude (claude)
committed
2fb1aff
Stop npm VEX attesting a patch one copy skips
Claude (claude)
committed
5ce219e
Stop Bun VEX attesting a patch one copy skips
Claude (claude)
committed
8d1a570
Make vendor --check flag an unwired npm copy
Claude (claude)
committed
c7479de
Format the #588 changes
Claude (claude)
committed
2ed972e
Document same-lock npm copies contesting VEX
Claude (claude)
committed
a0a210c
Merge remote-tracking branch 'origin/main' into agent/fix-npm-same-lock-unwired-copy
Claude (claude)
committed
edc7c8b