npm-pin-dependencies will pin your dependency versions based on lock file using installed versions.