[VitoVan]

I also bet my money on ocicl, because of its systems.csv for locking versions of dependencies.

[sauercrowd]

qlot has lockfile support with qlfile.lock