Use explicit version constraints. Whitelist specific versions.