npm audit fix (only devDependencies)

before: 12 vulnerabilities (8 moderate, 4 high)
after: 8 vulnerabilities (3 moderate, 5 high)