https://kocka.news/en/article/dev/179/new-standard-lock-file-format-for-python-package-management