We need to write the NuGet package hash into the lockfile

[forki]

We don't want to call OData during normal install process

[isaacabraham]

At what point should we do this then - when we build the lock file?

[forki]

yep

[isaacabraham]

I started work on this last night :-) it's funny how my solution and yours ended up virtually identical.