What the shrimp is a shrinkwrap.json? - Indrek Lasn - Medium

npm shrinkwrap This command locks down the versions of a package's dependencies so that you can control exactly which versions of each dependency will be used when your package is installed. The package.json file is still required if you want to use npm install.