if you only have one binary, transitively pinning your dependencies should be equivalent