So if the VCS dep is in the lockfile, that implies it is in fact a transitive dep and so is being included in the venv export IIUC.