Pipenv is great. At my day job we've started using pip-compile: https://github.com/jazzband/pip-tools and it's been working really well for us.

Coming from the PHP community we have fantastic tools like https://getcomposer.org which is similar to what you'd find with NPM with a file you define dependencies (package.json, composer.json) and another file locking the versions to what has been installed (package-lock.json, composer.lock). It seemed silly to me that in Python dependency management is still seeing a lot of tooling changes and iteration but it seems headed in the right direction.