To achieve reproducible builds we use pip-tools to lock packages to a particular version - see update_python_deps.sh write_wheel.py is used to generate our wheels.