wip

Signed-off-by: Matthew B White <[email protected]>

README.md

@@ -34,6 +34,12 @@ As an application developer, to learn about how to implement **"Smart Contracts"
 
 For details on what Nodejs runtime and versions of Hyperledger Fabric can be used please see the [compatibility document](COMPATIBILITY.md).
 
+## npm Shrinkwrap
+
+In line with the advice from [npm on shrinkwrap](https://docs.npmjs.com/files/shrinkwrap.json#description) the modules published do not contain a `npm-shrinkwrap.json` file. 
+
+It is **STRONGLY** recommended therefore that after testing, and before putting your contract into production a `npm-shrinkwrap.json` file is created. When the chaincode is install it will be via a `npm install --production` command. 
+
 ---
 
 ## License <a name="license"></a>

apis/fabric-contract-api/package.json

@@ -48,14 +48,14 @@
   "dependencies": {
     "fabric-shim-api": "2.1.5-unstable",
     "class-transformer": "^0.2.2",
-    "fast-safe-stringify": "~2.0.7",
+    "fast-safe-stringify": "^2.0.7",
     "get-params": "^0.1.2",
-    "reflect-metadata": "^0.1.12",
-    "winston": "3.2.1"
+    "reflect-metadata": "^0.1.13",
+    "winston": "^3.3.2"
   },
   "devDependencies": {
-    "ajv": "^6.5.5",
-    "ajv-cli": "^3.0.0",
+    "ajv": "^6.12.2",
+    "ajv-cli": "^3.2.1",
     "chai": "^4.1.1",
     "chai-as-promised": "^7.1.1",
     "chai-things": "^0.2.0",