I made a post yesterday where I advocated for this (with lockfiles) at https://maxleiter.com/blog/pin-dependencies https://maxleiter.com/blog/pin-dependencies b

I made a post yesterday where I advocated for this (with lockfiles) at https://maxleiter.com/blog/pin-dependencies https://maxleiter.com/blog/pin-dependencies but it was pointed out to me that pinning dependencies would cause duplicates in your rollup/webpack outputs. YMMV, as I haven't experienced that but haven't extensively looked into it