I haven't used it myself, so I cannot speak for it, but straight.el [1] has functionality to freeze the version of packages.

[1] https://github.com/raxod502/straight.el