[thinkingkong]

If you need to pin all your packages then it probably makes more sense to just have your own software package "layer" that imports your pinned base with the packages that are required.

[15020]

Many organizations are actually doing this.