> Pinning versions means that you will keep using an insecure version of a dependency until you update Which is why you schedule time each sprint/release to ch

> Pinning versions means that you will keep using an insecure version of a dependency until you update Which is why you schedule time each sprint/release to check your dependencies and upgrade them in a controlled fashion.