[Feynmanix]

As long as they run `pip install` locally at any point in their process before pushing to the repo, they should get the opportunity to see the pipask report.

[zahlman]

True. I was only trying to address "it's pretty uncommon to use lockfiles with pip". I should have quoted it in my first post.