[tleguijt]

At most projects we're using pip-tools which generates a fully pinned requirements.txt based on a manually kept (and clean) requirements.in which only contains the specific packages you need without their dependencies

[Waterluvian]

Thanks. I'll investigate this method. It sounds like you hand write dependencies and their versions into the requirements.in file?

[sciurus]

The idea is described at https://www.kennethreitz.org/essays/a-better-pip-workflow