@full-kilobyte-93429: one last thing related to the cache review: it's important that we don't have to actually have the content of blobs in order to hit the cache. as it stands, i think the entire dependency (rather than just its key) is being used