blog/moving-away-from-requirements-txt-for-more-secure-python-dependencies.html