Locks package.json dependencies to specific semvers and runs npm shrinkwrap