Add shrinkwrap to lock down dependencies' dependency versions