Production only shrinkwrap file

[yoavain]

I noticed that installing this package brings more than it needs for runtime. This is because the shrinkwrap file which is packed has dev dependencies too. Not sure why, but npm installs both dependencies & devDependencies when installing the package.
As I suggested here using a lock file instead and building a shrinkwrap file before packing and after pruning dev-dependencies can fix that.

This PR does the following:

1. Rename shrinkwrap file to lock file
2. Enable lock file in .npmrc file
3. Add prepack script to create the runtime dependencies only shrinkwrap file
4. Add postpack script to revert changes

(It does not install dev dependencies again, as the publish script runs in github action, and there's no point in doing that)

Note: The reason to delete the lock file is that npm prune --production only deletes files from the node_modules folder and does not update the lock file, and the npm shrinkwrap only renames the lock file to shrinkwrap file if it exists. When lock file does not exist, the shrinkwrap file is created from the existing dependencies tree (which represent the committed lock file, without the dev dependencies)

(I tested using npm pack lifecycle, but I think npm publish should use the same script lifecycle)

Some numbers to justify this change:

Pack .tgz file size:
before  111KB
after    12KB

Number of packages installed with the package:
before: 581
after:   72

Lock file size after installing only this package:
before: 203KB
after:   24KB

node_module size after installing only this package:
before: 51MB
after:   2MB

[yoavain]

Hi @barzik
Any chance to review, merge and publish this?
For a package with ~2500 DL per week, this should save the planet ~6TB of storage a year.
Also, you promised ;)

[euclidesdry]

@barzik I'm here to see this PR merged, and waiting to see this in the next release. I hope this happens soon!!

[yoavain]

@barzik
Sorry, but I mentioned this project in an issue I opened in the package manager best practices repo as a don"t do example.
Wanted to see what this committee thinks of my unpopular opinion