Pipenv is great. At my day job we've started using pip-compile: https://github.com/jazzband/pip-tools and it's been working really well for us. 

Coming from the PHP community we have fantastic tools like https://getcomposer.org which is similar to what you'd find with NPM with a file you define dependencies (`package.json`, `composer.json`) and another file locking the versions to what has been installed (`package-lock.json`, `composer.lock`). It seemed silly to me that in Python dependency management is still seeing a lot of tooling changes and iteration but it seems headed in the right direction.