What do you mean "just the top-level yarn.lock", doesn't it include all the resolved dependencies?