Glossary: Vulnerability, Asset and Change Management

Lockfile

Also written: requirements.txt, pinned versions

A file that pins the exact version of every dependency, like the shop's requirements.txt. Reading it is a credentialed-style check, and pip-audit checks only what it lists.