I use pip-compile in the pip-tools package: Keep your high-level dependencies in requirements.in. Create a virtual environment using venv. Run `pip-compile r

I use pip-compile in the pip-tools package: Keep your high-level dependencies in requirements.in. Create a virtual environment using venv. Run `pip-compile resolver=backtracking`. It autogenerates a requirements.txt file with all dependencies and sub-dependencies and their versions. This essentially acts as a lock file from other languages/frameworks. Install from the autogenerated requirements.txt file in the venv virtual environment. If a dependency changes, change in requirements.in, recompile the .txt file, and reinstall.