[mjw1007]

pip-tools can do both of those, yes.

For the second, pip-compile computes the new requirements.txt (which is effectively the lockfile) from scratch, and pip-sync (not shown in that Makefile fragment) removes packages that are no longer listed there.

[autograd]

Thanks a lot for the reply. I'll include it some time soon in the article update