Comment by Too

It is possible to specify hashes. https://pip.pypa.io/en/stable/topics/secure-installs/