Don't crash if shrinkwrap-dependencies were not passed in pkginfo

This prevents npm from crashing on shrinkwrap if a `package.json`
has no dependencies defined.

Added a test for @kislyuk

replaces: https://github.com/npm/npm/pull/4953