I have a bunch of
As stated in the NPM docs:
npm shrinkwrapis intended to lock down your dependencies for production use,
devDependencieswill not be included unless you explicitly set the
--devflag when you run npm shrinkwrap. If installed
devDependenciesare excluded, then npm will print a warning. If you want them to be installed with your module by default, please consider adding them to dependencies instead.
Basically, or you lock down all deps, or only the production deps.
Not even running
npm install --dev or
npm install --force can transcend the shrinkwrap functionality.