update package.json and npm shrinkwrap