I just has a super head scratching debugging session over a pex lockfile that had duplicate projects. That is

types-tqdm

appeared 3 times with 2 different versions. I think this is almost certainly from some of rebase snafu or quirky 'conflict' that git missed. I have a hacky CI check to catch duplicates in the future, but I'm wondering if anyone else has done anything fancier for lockfile validation?