npm semver and shrinkwrap fixes