Using pinned requirements would help deal with issues such as https://github.com/pypa/setuptools_scm/issues/611 We should also either use hashes or always source wheels and sdist from https://thirdparty.aboutcode.org/pypi/
Using pinned requirements would help deal with issues such as pypa/setuptools-scm#611
We should also either use hashes or always source wheels and sdist from https://thirdparty.aboutcode.org/pypi/