lock deps a bit