We are using git-repo [0]. Having a manifest (default.xml) with all the used packages and their version in a single file brings a lot of benefits.

[0] https://gerrit.googlesource.com/git-repo