Improve performance of dependency resolution
Dependency resolution is currently very slow, we believe because there are many individual requests being sent to the package registry.
It may be practical to have a call to the registry at the start of dependency resolution to say "list everything you have" (including dependencies) - or perhaps just to cache better. A lock file is an independent need but would also help as at that point the dependency resolution is performed once and reused.
(From discussion with @isc-kiyer today.)
On review today: the awfulness of this performance makes it a bug to be fixed, not an enhancement.
Several packages failed to pass on v1 because of this problem. See #645
We might want to consider the steps outlined in HSIEO-4444
Also, HSIEO-5745 mentions that IPM sometimes fails to detect cyclic dependencies. Should add a unit/integration test for that.