Upstream Reference
Current Provenant Read
Provenant already assigns root-level .pnp.cjs files to the correct npm/Yarn package during assembly, but it does not currently treat .pnp.cjs as its own metadata or dependency source.
Recommended Next Step
Keep this as a lower-priority npm/Yarn feature opportunity unless package-manager metadata coverage becomes a near-term focus.
Context
This item is from the upstream bug audit in docs/implementation-plans/UPSTREAM_BUG_AUDIT.md.