Supporting sdists and source trees in PEP 665

[sbidoul (Stéphane Bidoul)]

@sbidoul

So with this use case, local directories would only help in the lock file as a convenience. But I’d be inclined to not include them in the lock file as they kind of stand on the same foot as . .

OTOH if we don’t include them in the lock file that might lead to gaps in the dependency graph in the lock file… If we include them the installer would need to protect against path traversal issues / attacks.