fix: package.json & package-lock.json to reduce vulnerabilities (#422)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-6476909

Co-authored-by: snyk-bot <[email protected]>

Author: lholmquist