pip: weird behavior when using `pip.requirements = ["."]` while not speifying `mkDerivation.src`

[DavHau]

trafficstars

The pip module locks successfully, but when evaluating, it defaults to load the top-level source from the lock file, which crashes because sha256 = null.