Lockfiles aren't an issue. It is all the dependencies themselves.