Merge pull request #413 from peterramsing/audit-fix

Bumps developer dependencies and adds `package-lock`

Author: peterramsing