How does the julia 1.0 Pkg handle diamond dependencies?

Thanks for your answer, can you please elaborate? What am I overlooking?

How should it be impossible for package B and C to use different versions of D?
They have their own “virtual environments” (in Python terms) and can use whatever they want to