pin deps