npm-shrinkwrap锁定依赖
npm-lock.json vs npm-shrinkwrap.json
原文：https://www.cnblogs.com/hool/p/12748979.html
