We might still want a line item in the locked file to represent we had a dependency, we're just not locking it. This file is really helpful as a metadata of the dependencies.