pinpoint package versions in package.json, getting versions from package-lock.json

packagepinpoint.sh

jq < package.json '.dependencies | to_entries[]|select(.value|startswith("^"))|.key' | \
  xargs -I {} jq --arg v {} '.dependencies[$v]|{($v): .version}' package-lock.json | \
  jq 'to_entries[]|.key+" "+.value' | \
  xargs -P 1 -I {} sh -c 'key=$(echo {} | cut -f 1 -d " ");value=$(echo {} | cut -f 2 -d " ");jq --arg k $key --arg v $value ".dependencies[\$k]=\$v" package.json> package.tmp.json && mv package.tmp.json package.json'