Currently, our implementation of PyPI dependencies completely ignores lock files. We have to add back support to check the satisfyability of our constraints against a lock file where PyPI dependencies are also involved.

The biggest hurdle in this process is that in the lock-file we currently have no mapping from conda package names to PyPI package names. This will most likely have to be added to the lock-file format to ensure we can deterministically verify the satisfyability of the lock-file without requiring any internet connection.