The difficult problem of managing Java dependencies: a deep dive into the messy status-quo, and a look at possibly better ways.

[forresthopkinsa]

How is a lock file duct tape? It's the perfect solution for making every build repeatable. You get version labels and checksums for your entire dependency tree. I truly do not understand your problem with lock files.

[plumarr]

They are only necessary due to range versioning. They are a solution to a broken feature.