> I never mention transitive dependencies in my requirements.txt file, just direct dependencies and rely on pip to install all transitive libs. > You dont even

> I never mention transitive dependencies in my requirements.txt file, just direct dependencies and rely on pip to install all transitive libs. > You dont even have to freeze the version, just list the name and pull up latest version whenever you run pip upgrade This gets you into situations when you need to release an urgent one-line hotfix into production but your docker builds are broken because some version changed. Stable reproducible build are an absolute must if you ask me.