shrinkwrap dependency versions (lock to specific versions)

Similar to Gemfile.lock