cceead9 made keepInPackage keep every file but Markdown, source maps, and .node addons, and the install specs still expected the old file and byte counts. Each new count is what npm ci wrote for the fixture under that rule, less .package-lock.json, which the installer writes itself; the optional-only case's hashes come from its two tarballs. The vite snapshot also keeps fsevents' LICENSE and fsevents.d.ts, which a Linux install skips.