• In Version control? Yes! (I think most ecosystem's lockfiles are in version control) • manually regenerated when stated requirements change? Yes-ish. If you use Pants to generate them, Pants will put a metadata header at the top, and if your inputs change Pants will warn/error.