add option to verify lockfiles?

[uncomfyhalomacro]

i am not sure if this is the goal of the project as well. but i can't seem to do cargo vendor-filterer --locked # or --frozen. this is needed when vendoring for offline environments.

Not sure if cargo itself is a good idea to use it as a library yet

• https://docs.rs/cargo/0.79.0/cargo/
• https://github.com/rust-lang/cargo/blob/master/src/cargo/ops/lockfile.rs

[uncomfyhalomacro]

Other relevant differences/similarities between cargo_metadata and cargo

• https://docs.rs/cargo_metadata/latest/cargo_metadata/struct.Resolve.html
• https://docs.rs/cargo/0.79.0/src/cargo/core/resolver/resolve.rs.html#19-50

Relevant issue openSUSE-Rust/obs-service-cargo#84

Not sure if I understood correctly.

[uncomfyhalomacro]

Reference reason to use lockfile is to allow reproducible builds
https://doc.rust-lang.org/stable/cargo/commands/cargo-install.html?highlight=lock#dealing-with-the-lockfile