chore: bump package-lock.json with npm audit fix

Now `npm audit --omit=dev` runs correctly without any issue

Thanks @sangaman for the heads up!