shrinkwrap: npm shrinkwrap --dev means prod too

Due to 448efd0eaa6f97af0889bf47efc543a1ea2f8d7e, running `npm shrinkwrap
--dev` caused production dependencies to no longer be included in
npm-shrinkwrap-.json. Whoopsie! Added a regression test to go with the
fix.

Fixes #7641.

1 files changed, 7 insertions, 1 deletions

diff --git a/lib/shrinkwrap.js b/lib/shrinkwrap.js
index a5783837c..03192a3fa 100644
--- a/lib/shrinkwrap.js
+++ b/lib/shrinkwrap.js
@@ -20,6 +20,12 @@ function shrinkwrap (args, silent, cb) {
     log.warn("shrinkwrap", "doesn't take positional args")
   }
 
+  // https://github.com/npm/npm/issues/7641
+  // introduced because `npm ls` can now show dev and prod depenednecy
+  // trees separately
+  if (npm.config.get("dev")) {
+    npm.config.set("production", true)
+  }
   npm.commands.ls([], true, function (er, _, pkginfo) {
     if (er) return cb(er)
     shrinkwrap_(pkginfo, silent, npm.config.get("dev"), cb)
@@ -45,7 +51,7 @@ function shrinkwrap_ (pkginfo, silent, dev, cb) {
             return
           }
 
-          log.warn("shrinkwrap", "Excluding devDependency: %s", dep)
+          log.warn("shrinkwrap", "Excluding devDependency: %s", dep, data.dependencies)
           delete pkginfo.dependencies[dep]
         })
       }