locked down dependencies