-- edit --
Seems that npm shrikwrap -> npm i -> npm shrikwrap is not guaranteed to produce the same output.