Hash.js dependency is only needed by elliptic.

npm-shrinkwrap.json

@@ -26,13 +26,13 @@
           "version": "1.0.5",
           "from": "brorand@^1.0.1",
           "resolved": "https://registry.npmjs.org/brorand/-/brorand-1.0.5.tgz"
-        }
-      }
         },
         "hash.js": {
-      "version": "1.0.2",
-      "from": "hash.js@^1.0.0",
-      "resolved": "https://registry.npmjs.org/hash.js/-/hash.js-1.0.2.tgz"
+          "version": "1.0.3",
+          "from": "hash.js@=1.0.3",
+          "resolved": "https://registry.npmjs.org/hash.js/-/hash.js-1.0.3.tgz"
+        }
+      }
     },
     "inherits": {
       "version": "2.0.1",

package.json

@@ -84,7 +84,6 @@
     "bs58": "=2.0.0",
     "buffer-compare": "=1.0.0",
     "elliptic": "=3.0.3",
-    "hash.js": "=1.0.2",
     "inherits": "=2.0.1",
     "lodash": "=3.10.1",
     "sha512": "=0.0.1"