In what ways do version pining/lockfiles not solve this problem?