IMO if a sysadmin wants to have visibility into the requirements.txt that's fine. If they want to enforce a policy of pinning versions, that's very welcome (th

IMO if a sysadmin wants to have visibility into the requirements.txt that's fine. If they want to enforce a policy of pinning versions, that's very welcome (though I would do that anyway). If they have specific, relevant comments about upgrades of specific packages - again, fine (though in practice they never do). If they want to be a gatekeeper for changes to that file they can fuck off.