I don't spend a lot of time in Python, but my current understanding having read Python documentation and seeing some projects online is that you use pip and req

I don't spend a lot of time in Python, but my current understanding having read Python documentation and seeing some projects online is that you use pip and requirements.txt with --require-hashes, venv, and pyproject.toml to use a standard dependency management toolchain. Is that correct?