Add an option to lock dependencies