put your dependencies on lockdown - closes #67