re: https://github.com/pantsbuild/pants/issues/21252 I was originally leaning towards an upstream way to pin all of the

Requires-Dist

to the lockfile, but after mulling it more I think that is pretty niche and anyone doing something like that might want pretty custom control anyway. I'm now leaning towards the "really really know what I'm doing" flag since that would open the door for other niche plugins. Thoughts either way welcome.

an advanced flag on

python_distribution

targets would be a good interface for a feature like that. There are some pitfalls, however, like vcs deps.