chore: bump package-lock (#643)

Not sure why dependabot can't update js-yaml as a transitive
dependency of standard, but it is failing. So I uninstalled
standard and reinstalled it locally. That fixed it.

Author: Trott