pirut and pup seem to not do any locking. You can start them both simultaneously, and have them both updating, adding, or removing packages at the same time. They appear to trust that the rpm locking will save them. This seems... perilous.
Modified so that we use the yum lock file.