I only have my .emacs file under version control, which automatically installs missing packages through use-package's :ensure parameter.

The downside is of course that it takes a while after a fresh checkout.