lock dependencies
locked dependency