Post #1834523

@jni @almar it's more of a "catch on" for the community than expecting libraries to use lock files. What would have been also useful is a cooldown period before a new release is used in resolving dependencies.