Thanks to
@sbidoulStéphane Bidoul , pip 25.1 will have a `pip lock` command that uses `pylock.toml`!
https://github.com/pypa/pip/pull/13213
pip-tools has started looking at if they can leverage it.
https://github.com/jazzband/pip-tools/issues/2124
pip-audit has support in 2.9.0 .
https://pypi.org/project/pip-audit/
@frostming has a PR for 'packaging' to add the required marker support (I assume for PDM support). It's getting really close to being merged.
https://github.com/pypa/packaging/pull/888
I'm a bit relieved there's uptake of pylock.toml already!