We are careful about which packages we use, trying to stick with well-established packages with active maintainers. But it can be useful to have a record of exactly which packagees are in play, and better still, which versions of those packages are being used. So you can use a publication entry to request loading the snapshot 1  package, which will then automatically generate such a record into a <job>.dep file. See Subsection 44.3.10 for details on electing this feature.
ctan.org/pkg/snapshot