Bump kind-of to `^6.0.3` for fixing vulnerability

[onlined]

The semver range already includes 6.0.3, but it doesn't disallow lower versions. So for the best security, it should be upgraded in package.json.

[cdrikd]

+1 for this vulnerability fix.