pin ranged dependencies to an installed version - View it on GitHub