--- a/commitindex/requirements.txt
+++ b/commitindex/requirements.txt
@@ -1,2 +1,45 @@
+# The following libraries are direct requirements of the
+# commitindex.
+click==6.7 \
+    --hash=sha256:29f99fc6125fbc931b758dc053b3114e55c77a6e4c6c3a2674a2dc986016381d \
+    --hash=sha256:f15516df478d5a56180fbf80e68f206010e6d160fc39fa508b65e035fd75130b
+connexion==1.1.5 \
+    --hash=sha256:aa17010b1e0f15bc89df77804d0e15a56b6f38791bd9d5ea2922e98ebe493fc5 \
+    --hash=sha256:2689e8c88aa2e8df5b544d04fbfe925ed14405648e840eb30fcea212f03f0a76
+Flask==0.12 \
+    --hash=sha256:7f03bb2c255452444f7265eddb51601806e5447b6f8a2d50bbc77a654a14c118 \
+    --hash=sha256:93e803cdbe326a61ebd5c5d353959397c85f829bec610d59cb635c9f97d7ca8b
 requests==2.13.0 \
     --hash=sha256:1a720e8862a41aa22e339373b526f508ef0c8988baf48b84d3fc891a8e237efb
+
+# The following libraries are depedencies of the requirements listed above.
+clickclick==1.2.1 \
+    --hash=sha256:a342b98af1335041b70236131719c909305c4ebff56c110ab964ba585ff133aa \
+    --hash=sha256:22eedfce2499d7a8c5b8c868fc93a495eb74bf7b753a6cb9ed2aa6a32a3ddd05
+itsdangerous==0.24 \
+    --hash=sha256:cbb3fcf8d3e33df861709ecaf89d9e6629cff0a217bc2848f1b41cd30d360519
+Jinja2==2.9.5 \
+    --hash=sha256:a7b7438120dbe76a8e735ef7eba6048eaf4e0b7dbc530e100812f8ec462a4d50 \
+    --hash=sha256:702a24d992f856fa8d5a7a36db6128198d0c21e1da34448ca236c42e92384825
+jsonschema==2.6.0 \
+    --hash=sha256:000e68abd33c972a5248544925a0cae7d1125f9bf6c58280d37546b946769a08 \
+    --hash=sha256:6ff5f3180870836cae40f06fa10419f557208175f13ad7bc26caa77beb1f6e02
+MarkupSafe==1.0 \
+    --hash=sha256:a6be69091dac236ea9c6bc7d012beab42010fa914c459791d627dad4910eb665
+PyYAML==3.12 \
+    --hash=sha256:c01b880ec30b5a6e6aa67b09a2fe3fb30473008c85cd6a67359a1b15ed6d83a4 \
+    --hash=sha256:827dc04b8fa7d07c44de11fabbc888e627fa8293b695e0f99cb544fdfa1bf0d1 \
+    --hash=sha256:592766c6303207a20efc445587778322d7f73b161bd994f227adaa341ba212ab \
+    --hash=sha256:326420cbb492172dec84b0f65c80942de6cedb5233c413dd824483989c000608 \
+    --hash=sha256:b4c423ab23291d3945ac61346feeb9a0dc4184999ede5e7c43e1ffb975130ae6 \
+    --hash=sha256:5ac82e411044fb129bae5cfbeb3ba626acb2af31a8d17d175004b70862a741a7
+six==1.10.0 \
+    --hash=sha256:0ff78c403d9bccf5a425a6d31a12aa6b47f1c21ca4dc2573a7e2f32a97335eb1 \
+    --hash=sha256:105f8d68616f8248e24bf0e9372ef04d3cc10104f1980f54d57b2ce73a5ad56a
+strict-rfc3339==0.7 \
+    --hash=sha256:5cad17bedfc3af57b399db0fed32771f18fc54bbd917e85546088607ac5e1277
+swagger-spec-validator==2.0.4 \
+    --hash=sha256:869930c23459a40aa425a61f60883663d92c000d1e7e8b4441e2bc54d3a71a0e
+Werkzeug==0.12.1 \
+    --hash=sha256:918322630c58fa52b89e14c45de3ad78514e18928dac726060bb89cd647f6b83 \
+    --hash=sha256:6716830febe9808bb7521fd26db3b398450cbed0886b2b4bea678b87340f534e