One would be well-advised to provide not only a requirements.txt file, but also a lock file, if the use case is important enough.