Bump up package.json dependencies

[kgrz]

Most of the packages are very old and might need some upgrades. Bonus if the a lockfile is committed to the project (npm is preferable only because it's more widely available).