Don't crash if dependencies were not passed in pkginfo.

Please test better. `npm shrinkwrap` doesn't work on a dependency-less `package.json`.