Merge pull request #2400 from opf/feature/npm-shrinkwrap-dev

Lock down dev dependencies w/npm shrinkwrap too

frontend/doc/DEVELOP.md

@@ -0,0 +1,12 @@
+# Developing OpenProject Frontend
+
+## Changing or updating Dependencies
+
+We use `npm shrinkwrap` to lock down both development and runtime dependencies.
+When adding or removing dependencies, please adhere to the following workflow:
+
+    npm install
+    npm shrinkwrap --dev
+    ./scripts/clean-shrinkwrap.js
+
+Please commit `npm-shrinkwrap.json` along with any changes to `package.json`.