[blondin]

a bit like "pip freeze > requirements.txt" then?

[vageli]

> a bit like "pip freeze > requirements.txt" then?

With the added bonus that it also contains a hash of the package so if someone pushes a new version with the same version number it would complain that the hashes don't match.