Poetry is a dependency manager for python projects (https://python-poetry.org/). A lockfile is a generic mechanism to serialize mutations to a resource, in this case, probably the file that stores the project's dependency configuration.
It's common for an organization to stop to review facts (aka investigate) before taking action or issuing claims or a defense. That's the stage they're at right now.
The people who jump to a microphone to say "nuh uh! not us!" before they've stopped to look at the situation are not people to work for. Because when they're wrong, things are only going to get worse.
None of this paper trail has been surfaced or aired in a public forum.
And Uber is not denying allegations until they do an investigation on their end. When some sort of evidence comes out, that's when we should be making judgements.
They seem to be doing just fine without the consent of the governed, given voter turnout in the US.
I prefer to look through the lens of expected value. How can you vote in a way that maximizes the chance that your preferred policy outcomes will go through? "Don't vote for anyone who has supported it in any way" is nice in theory, but there are plenty of times when a vote any other way has lower expected value.
