Embed Notice

@wolf480pl @phnt @sjvn Nah, requirements.txt is way too loose as it's just for dependency requirements, and which blobs will be downloaded is by definition system-dependent.

You'd want either a lockfile (hell to maintain, pretty much nobody really uses them for security purposes, after all you'd need to audit binaries if you'd do) or a curated repository like a distro.