Verion Lock deps and add shrinkwrap.json.

This will prevent another #1403

Currently this lib is at the mercy of any of the deps pushing a breaking
change or not following semver.