fix: package.json & package-lock.json to reduce vulnerabilities (#1017)

fix: package.json & package-lock.json to reduce vulnerabilities (#1017) #549