# all dependencies are pinned to an exact version

# just pinned
colorama==0.4.6

# with hashes -- https://pip.pypa.io/en/stable/topics/secure-installs/#hash-checking-mode
FooProject == 1.2 \
  --hash=sha256:2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824 \
  --hash=sha256:486ea46224d1bb4fb680f34f7c9ad96a8f24ec88be73ea8e5a6c65260e9cb8a7
