I've been a happy user of pipenv for several years (at work, in production) and still recommend it. You lock the versions you want independently of the requirem

I've been a happy user of pipenv for several years (at work, in production) and still recommend it. You lock the versions you want independently of the requirements.txt so you can update just the packages you want without worrying about sub-dependencies. 10/10 recommend.