12/14/2021, 10:11 PM
are we requiring JVM users to use "resolves" / lockfiles? Related, what will we want for Python?
12/14/2021, 10:12 PM
yes, we are.
and i think that we should for Python as well, although that will require a deprecation period
12/14/2021, 10:13 PM
Excellent, I strongly support having users do the more secure thing. Also note that Poetry requires that you use a lockfile, which people don't complain about