[18:16:35] <robhudson> dstufft: what’s the magic that builds the requirements.txt files with the hashes based on the .in files?
[18:18:43] <dstufft> robhudson: eh, there's a little magic but nto enough right now.. pip-compile (from pip-tools) can compile them sans hashes, and hashin can take an already compiled file and add hashes, so I just manually update the .txt files with hashes via hashin, and I have a travis job that ensures that the output of .txt matches the output of pip-compile *.in
[18:23:09] <robhudson> so it’s a manual step every so often?
[18:23:24] <robhudson> dstufft: do you use docker in production?
[18:23:54] <dstufft> robhudson: yea, normally whenever requires.io opens a PR-- I would love it if requires.io would send PRs with hashes though
[18:24:08] <dstufft> then I would just have to hit merge
[18:24:15] <dstufft> robhudson: no docker in production currently