yeah shrinkwrap is really dumb - just look at an existing node_modules directory, and produce a JSON file describing exactly the tree and versions