pip-tools (pip-compile, mostly) does everything I wanted out of pipenv (a sane lockfile) and is more explicit. I don't have any reason to use pipenv. No idea why pip-tools isn't super popular, honestly.