default to HEAD & shrinkwrap.json
remove forced 2 argument call site