Better dependency lock