Can one set visibility on third party dependencies? I’d like to make it so scipy cannot be imported directly - and ideally transitively - from a specific package.

I imagine it works for direct dependencies, have you tried and got errors? I imagine it won’t work for transitive ones due to https://github.com/pantsbuild/pants/issues/12733