Locks package.json dependencies to specific versions and runs npm shrinkwrap