I'm not sure about conflict resolution when but I run a pip freeze it adds TONS of dependencies outside of the 2-3 I had in my app because those were the dependencies of my dependencies.
Ruby does the same thing with Gemfile.lock. npm does the same thing with package-lock.json.