[frou_dh]

And a key thing is that both files can be committed to source control, not just one or the other.

[mattbillenstein]

Yeah, and the other bits about pip-compile -P to upgrade a single package and whatnot are very handy.