Remove SHA calculation from requirements

Witht the current solution, the new sha file is placed next to my requirements file and "pollutes" my repository. 
If you insteade use the audit option in the file defintion, you get exactly the same effect with less code and no additional fiels overead