But even with multiple lockfiles, at least the dep management is rigorous - each target in your internal code has to declare which lockfile(s) it's compatible with.