[npm] shrinkwrap