bumped version
cache filenames no longer include the path of the source file, just the hash the hash of its contents
added an option to write merged frozen requirements directly to a file instead of stdout