github.com/articles/creating-an-oauth-token-for-command-line-use
    http://developer.github.com/v3/oauth/#oauth-authorizations-api

Requirement Format
------------------
Pipchecker gets the sha of frozen repo and checks if it is
found at the head of any branches. If it is not found then
the requirement is considered to be out of date.

Therefore, freezing at the commit hash will provide the expected
results, but if freezing at a branch or tag name, pipchecker will
not be able to determine with certainty if the repo is out of date.

Freeze at the commit hash (sha)::
    git+git://github.com/django/django.git@393c268e725f5b229ecb554f3fac02cfc250d2df#egg=Django
    https://github.com/django/django/archive/393c268e725f5b229ecb554f3fac02cfc250d2df.tar.gz#egg=Django
    https://github.com/django/django/archive/393c268e725f5b229ecb554f3fac02cfc250d2df.zip#egg=Django

Freeze with a branch name::
    git+git://github.com/django/django.git@master#egg=Django
    https://github.com/django/django/archive/master.tar.gz#egg=Django
    https://github.com/django/django/archive/master.zip#egg=Django

Freeze with a tag::
    git+git://github.com/django/django.git@1.5b2#egg=Django
    https://github.com/django/django/archive/1.5b2.tar.gz#egg=Django
    https://github.com/django/django/archive/1.5b2.zip#egg=Django

Do not freeze::
    git+git://github.com/django/django.git#egg=Django

r/