[2OEH8eoCRo0]

Full version numbers, pin your dependencies, commit dependencies to a local repo. Update them only when necessary (security patch, feature you need).

[WA]

Can you elaborate? Your local repo then re-exports the dependencies to be consumed by your application or how would you do it properly?