lockesmith

Point it to a package.json next to a package.lock.json and it will update the package.json to reflect the current state of the lockfile (as if saving exact versions)