diff --git a/README.md b/README.md
index 8fe4458..ba0f37a 100644
--- a/README.md
+++ b/README.md
@@ -12,3 +12,18 @@ The only code that should be used directly by users is the `libcoveocds.config`
 
 Other code ( Code in `libcore`, `lib`, etc) 
 should not be used by external users of this library directly, as the structure and use of these may change more frequently.
+
+
+## Updating dependencies
+
+This is a bit messy; because we use two of our own packages and one of them isn't currently in pypi. Sorry.
+
+  *  Update setup.py with any requirements this library needs, and update requirements.in if needed.
+  *  Perform the usual steps to generate the txt files
+  *  Go to the txt files and ...
+        *  remove the line that starts "-e git+git@github.com:open-contracting/lib-cove-ocds.git". (This ends up here because of `-e .`, but we need that so the requirements in setup.py are installed.)
+        *  remove the two error lines at the top that start "Skipping line in requirement file" and " (add #egg=PackageName to the URL to avoid this warning)"
+
+
+
+
diff --git a/requirements.in b/requirements.in
new file mode 100644
index 0000000..9f868b9
--- /dev/null
+++ b/requirements.in
@@ -0,0 +1,3 @@
+-e git+https://github.com/OpenDataServices/flatten-tool.git@v0.5.0#egg=flattentool
+-e git+https://github.com/OpenDataServices/lib-cove.git@v0.1.0#egg=libcore
+-e .
diff --git a/requirements.txt b/requirements.txt
index 9f868b9..c063b66 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,30 @@
--e git+https://github.com/OpenDataServices/flatten-tool.git@v0.5.0#egg=flattentool
--e git+https://github.com/OpenDataServices/lib-cove.git@v0.1.0#egg=libcore
--e .
+-e git+https://github.com/OpenDataServices/flatten-tool.git@4c13ef0b32a59e810919a3de09bc8f64ce8f9392#egg=flattentool
+Skipping line in requirement file [requirements.in] because it's not clear what it would install: .
+  (add #egg=PackageName to the URL to avoid this warning)
+## The following requirements were added by pip freeze:
+attrs==19.1.0
+bleach==3.1.0
+cached-property==1.5.1
+certifi==2018.11.29
+chardet==3.0.4
+commonmark==0.8.1
+contextlib2==0.5.5
+Django==2.1.7
+et-xmlfile==1.0.1
+future==0.17.1
+idna==2.8
+jdcal==1.4
+json-merge-patch==0.2
+jsonref==0.2
+jsonschema==3.0.1
+-e git+https://github.com/OpenDataServices/lib-cove.git@7c8d2ff0bbb8d9c0f2a124eacfa2058b0eee3a9a#egg=libcove
+lxml==4.3.2
+openpyxl==2.6.1
+pyrsistent==0.14.11
+pytz==2018.9
+requests==2.21.0
+schema==0.7.0
+six==1.12.0
+urllib3==1.24.1
+webencodings==0.5.1
+xmltodict==0.12.0
diff --git a/requirements_dev.in b/requirements_dev.in
new file mode 100644
index 0000000..fd4bf24
--- /dev/null
+++ b/requirements_dev.in
@@ -0,0 +1,3 @@
+-r requirements.in
+pytest
+flake8
diff --git a/requirements_dev.txt b/requirements_dev.txt
index 28eae1d..24d9c0f 100644
--- a/requirements_dev.txt
+++ b/requirements_dev.txt
@@ -1,5 +1,39 @@
--e git+https://github.com/OpenDataServices/flatten-tool.git@v0.5.0#egg=flattentool
--e git+https://github.com/OpenDataServices/lib-cove.git@v0.1.0#egg=libcore
--e .
-pytest
-flake8
+pytest==4.3.0
+flake8==3.7.7
+## The following requirements were added by pip freeze:
+atomicwrites==1.3.0
+attrs==19.1.0
+bleach==3.1.0
+cached-property==1.5.1
+certifi==2018.11.29
+chardet==3.0.4
+commonmark==0.8.1
+contextlib2==0.5.5
+Django==2.1.7
+entrypoints==0.3
+et-xmlfile==1.0.1
+-e git+https://github.com/OpenDataServices/flatten-tool.git@4c13ef0b32a59e810919a3de09bc8f64ce8f9392#egg=flattentool
+future==0.17.1
+idna==2.8
+jdcal==1.4
+json-merge-patch==0.2
+jsonref==0.2
+jsonschema==3.0.1
+-e git+https://github.com/OpenDataServices/lib-cove.git@7c8d2ff0bbb8d9c0f2a124eacfa2058b0eee3a9a#egg=libcove
+lxml==4.3.2
+mccabe==0.6.1
+more-itertools==6.0.0
+openpyxl==2.6.1
+pathlib2==2.3.3
+pluggy==0.9.0
+py==1.8.0
+pycodestyle==2.5.0
+pyflakes==2.1.1
+pyrsistent==0.14.11
+pytz==2018.9
+requests==2.21.0
+schema==0.7.0
+six==1.12.0
+urllib3==1.24.1
+webencodings==0.5.1
+xmltodict==0.12.0