Since gst-plugins-rs can be built as a top-level project and distributed, it should contain a Cargo.lock.
Cargo.lock