Many folks will copy/paste the sample code from the README directly. In CI, most people will want to enforce a frozen lockfile.
Ben LimmerandGitHub