Add NPM shrinkwrap to lock dependencies