Control your dependencies, don't make them control you. Pin dependendency versions, don't allow auto-upgrade. And cache your dependencies locally for as long a

Control your dependencies, don't make them control you. Pin dependendency versions, don't allow auto-upgrade. And cache your dependencies locally for as long as you depend on them.