requirements: freezing dependencies