Unless you audit the version you're pinning, what's the difference?