Update package-lock.json

Because GitHub kindly shows us that they found a potential security
vulnerability in one of our dependencies.

Author: ikalnytskyi