npm shrinkwrap

This command repurposes package-lock.json into a publishable npm-shrinkwrap.json or simply creates a new one
npm shrinkwrap
 

Recommendations