Please update package-lock.json

[michaelschefczyk]

Building this complains "The package-lock.json file was created with an old version of npm".

xmldom@0.1.27, is-buffer@1.1.5, polyline@0.0.3, querystring@0.2.0, corslite@0.0.6, chokidar@1.7.0, buffer@4.9.1, buffer@5.0.6 are affected by CVEs, out of date or inder the @mapbox namescpace.

Could someone with relevant knowledge please consider an update?