It's not entirely clear yet whether we make good use of the static list
of dependencies. But if we ever have a CI for building and testing we
will be able to use the exact package copies to have more reproducible
results.