>To always use the same versions of every dependency you'll want to shrink wrap.

Does "shrink wrap" mean "bundle"? If so, I strongly disagree. It's possible to explicitly use the exact same versions of dependencies without resorting to bundling all the source/binaries. Guix and Nix are particularly well suited for this.

>And yes, of course dependencies have dependencies.

But you have to admit that the depth of this dependency tree is insane.

I mean npm shrinkwrap.

Depth of tree is reasonable: if you install them at the top.