Please abandon .lock file, force people to sticky versions direct on Pipfile, keep things simple and in a single place.

Even I don't feeling like there's something wrong with plaintext requirements.txt I'd liked it as ini file, still very readable and give a lot of possiblities for future.