fix: package.json & package-lock.json to reduce vulnerabilities (#388)

fix: package.json & package-lock.json to reduce vulnerabilities (#388) #236