fix: package.json to reduce vulnerabilities

fix: package.json to reduce vulnerabilities #404