`npm shrinkwrap --dev` for reproducible builds