This release reverts 644c2ff, which avoided re-downloading URL and shinkwrap dependencies when doing
npm install. You can see the in-depth reasoning in d8c907e; the problem was, that the patch changed the behavior of
npm install -f to reinstall all dependencies.
A new version of the no-re-downloading fix has been submitted as #4303 and will hopefully be included in the next release.