Add npm lock with shrinkwrap