Store indirect dependencies in the lockfile - closes #43