Pinning exact versions is generally a good idea but it's something you do for a whole project. Not an individual package.