Consider using Poetry for dependency management

Poetry manages dependencies, it embeds a working list of versioned dependencies to version control, thus enabling installing the package without resolving dependencies each time, and making dependency upgrade a separate, version control suitable, task.