Updated dependencies to fix security issues

[chill117]

Removed common-style (deprecated, depends on unpatched packages)

[BigBlueHat]

Thanks for sending these! We've actually got quite a tangle of dependencies that need upgrading (or removing/reconsidering).

@thornjad not sure if this is the "tip of the spear" in that regard or not, but certainly bumping all the versions is important before the next major (and possibly next minor--if we can avoid BC breaks) release.

[thornjad]

I certainly agree this is important. However I do think we need to replace common-style rather than just remove it. I think eslint is a good contender, though there are several other good options as well.

[thornjad]

For the most part, I would prefer to leave most of these with the ^ (meaning any minor version greater than the one specified), so we don't have to update package.json often. To that end, I'd request that most if not all of the package version here start with ^.

[lvl99]

Apparently the version of qs used in http-server has some potential issues: https://app.snyk.io/test/npm/http-server/0.11.1

[thornjad]

@lvl99 you're right, and it's already fixed in the next version of union, so updating dependencies should fix that. It's because of that vulnerability that this is high on my radar.

@chill117 would you mind changing this to use version ranges instead of specific versions? You can also mark this as addressing #461

[chill117]

I've updated the version numbering to include ~ and ^ where appropriate. I returned common and the pretest for code-style checking - to limit the scope of this PR to updating non-dev dependencies.

[BigBlueHat]

@thornjad there's a suggestion for prettier as a replacement to common-style in #494. Certainly this can wait, but wanted to connect dots.

This looks good to merge (pending your merge-train 🚆). 😄

[thornjad]

Choo choo!

I also made a suggestion of eslint in #497, but I meant that more as a discussion (and didn't see #494 come in before it). And of course draft PRs become a thing just after I need it.