Update dependencies with known vulnerabilities (#236)

`$ npm audit` listed quite a few known vulnerabilities, primarily
child dependencies of nodemon and tap.

Although these are all dev dependencies, not something that's being used
in production, it's always a good idea to get rid of vulnerable packages.

Author: phillipj