Best practice for pinning version of individual packages

Started an answer that spiraled out of control so just put it in a gist.

2 Likes