Dependency resolution is only ~20% of the real problem. The hard parts are lockfile determinism, hoisting strategies, platform-specific resolution, cache invalidation, and reproducible installs. Still, this is a solid LLD exercise.