Hardening/locking versions of dependency links