Warn if lock file is insufficient

[thumphries]

Scream a little bit if the project has dependencies that aren't included in the lock file. Would also be nice if testci failed on it.

[thumphries]

@jystic would this be hard? I might try my hand during yakconf 5

[jacobstanley]

@thumphries this situation might be desirable, so we'd have to think of a way to say "i intend this lock file to contain everything"

[thumphries]

Do people write partial lock files manually or something?

[jacobstanley]

I have used that on occasion

[thumphries]

rgr

add some optional marker to the mafia-generated locks? I think total locking for deterministic build is the more common use case

[jacobstanley]

yeah something like that