For those of you in the Python world concerned about such a thing, check out Peep: https://pypi.python.org/pypi/peep https://pypi.python.org/pypi/peep It's a p

For those of you in the Python world concerned about such a thing, check out Peep: https://pypi.python.org/pypi/peep https://pypi.python.org/pypi/peep It's a pip wrapper that expects you to provide hashes for your dependencies in requirements.txt. There was a lightning talk at PyCon this year, it seems super easy to use (though admittedly I'm not using it regularly yet).