Closed
Description
Bug was introduced here: fbf0e26#diff-7a296c2aaedb49f2b91b7fa9c81b536cL538
We always allow reads of assets outside the graph.
I think what should happen is we should disallow reads outside the graph and make sure all files from all packages are in the graph.
This caused a failure in json_serializable