bump npm-shrinkwrap to ^4.0.0