froze dependencies