packages

The documentation states that the default cache dir on an XDG compatible *nix system is $XDG_CONFIG_HOME/composer/cache but composer uses XDG_CACHE_HOME/composer as default.

https://getcomposer.org/doc/03-cli.md#composer-cache-dir quote:

By default it points to $COMPOSER_HOME/cache on *nix and macOS, and C:\Users<user>\AppData\Local\Composer (or %LOCALAPPDATA%/Composer) on Windows.

See https://yarnpkg.com/features/pnp#fixing-node_modules

In this install mode (the default starting from Yarn 2.0), Yarn generates a single .pnp.cjs file instead of the usual node_modules folder containing copies of various packages. The .pnp.cjs file contains various maps: one linking package names and versions to their location on the disk and another one linking package names and versions

Github introduced a nice UI for syncing your fork with upstream.

We could use something like that for package links. osc has the setlinkrev command for this.

Some packages may bundle dependencies. We could report outdatedness for these the following way: for outdated packages with single download, propagate outdated status onto the download URL. Then we could show this download specially for other packages, or even make it affect the status.