> a bit like "pip freeze > requirements.txt" then? With the added bonus that it also contains a hash of the package so if someone pushes a new version with the

> a bit like "pip freeze > requirements.txt" then? With the added bonus that it also contains a hash of the package so if someone pushes a new version with the same version number it would complain that the hashes don't match.