I wish this were true. In the modern JavaScript ecosystem you either pin everything or pin nothing.