[joshuamorton]

Look into bazel, pants, and similar hermetic build systems.

You pin all dependencies and manage flags and such but via the build system.