hashin pins Python dependencies to checksums in requirements.txt for securitygithub.com/peterbe1 pointspyc2 years ago