Pimple lock down. TODO: lock down all deps