Lock dependencies & update readme