[ak217]

Not so. I use pip freeze to manage my dependencies, including all transitive dependencies, and my builds are deterministic.

[jklehm]

How do you include checksums in your freeze to catch when the package changes on the pypi server using only pip?

[ak217]

I don’t. PyPI no longer allows reuploading the same release.