fix: package.json & yarn.lock to reduce vulnerabilities (#309)

fix: package.json & yarn.lock to reduce vulnerabilities (#309) #42