This is recommended in Rebar3 documentation: [Lock files] should always be checked into source control. https://rebar3.org/docs/configuration/dependencies/#lock-files