Remove `lockdown`, use `npm shrinkwrap`

For documentation on `npm shrinkwrap` see
https://npmjs.org/doc/shrinkwrap.html.