hashin pins Python dependencies to checksums in requirements.txt for security | Hacker News Reader