Only install production dependencies

[rizzlesauce]

Otherwise, installing the packed dependency will also install that
dependency's non-production dependencies.

[nicojs]

Hi @rizzlesauce I see your --production and I raise you an --no-package-lock.

See #23 and #30. install-local will no longer install anything except what you ask it to.

[arobinson]

We will probably need to stop using this library as a result of this change. The --no-package-lock is causing our builds to fail as it is using newer versions of libraries it shouldn't be using since it is ignoring the package lock. As a result, our builds are trying to download newer libraries that are not in our nexus 3 cache and causing the build to fail. Unfortunately it does not seem that we can force it to use the package-lock. Also, ignoring the package lock is a security vulnerability as it is downloading libraries from the internet and executing them without being a version we have verified