Deno optionally supports lock files, though its current lock files are just for asserting that specific URLs have specific hashes rather than controlling where/which dependencies are found. Maybe its lock files will be extended for handling this.