Add npm-shrinkwrap

Combined with git, we will have a pretty good idea the code we ship