Pin npm-shrinkwrap to v5.0.0 so that it works with npm 2.x.

Fixes #15105.

/CC @cvrebert