package.json: updated to reflect shrinkwrap