Improve deps

[strugee]

The patches here do two things:

1. Upgrade from release@5 to release@6 to squash a bunch of deprecation warnings on npm install. I checked the release notes; all they did was enable --strict by default which is the sane behavior anyway
2. Run npm shrinkwrap. See the extended commit message for why this is a good idea.