Use ^ for trusted dependencies