3 ms·

For research in particular, I'd suggest a Pipfile.lock. That will ensure that the packages installed match exactly, not just by version number.