Ability to disable the sha1 integrity removal (npm package manager)

[asos-danielc]

Issue

Some private repositories, such as Azure Artifacts, do not support integrity sha's such as shar512 (default for NPM) but instead only use sha1. In turn, when snyker removes these properties, the subsequent npm install is not reinstated the sha1

Details

Using a repository that uses Azure Artifacts, run npx @asos/snyker --lockfile package-lock.json, you will see that all integrity properties get removed from the package-lock.json and not re-added.

The suggestion here is to add a flag, e.g. --preserve-integrity which in the instance of sha1 does not remove them.