Fixes #4184 Convert from lockdown to shrinkwrap

I did not include the devDependencies. If it is felt that it is important to include them, I can update this pull request.