pip install --require-hashes

Also written: --require-hashes, pip-compile, requirements.lock, pip-tools, uv

A pip option that refuses any package file whose contents don't match the hash in your lock file, even under the same version number. Tools like pip-tools and uv generate the lock file.