Just pick a lightweight web framework, and freeze the dependencies. I don't see the problem.