Update lock file

[rudolfbyker]

Some of the npm packages in the lock file have security advisories. Maybe something like Renovate Bot or Dependabot will be useful for this repo. See the security scan at https://hub.docker.com/r/refstudycentre/citeproc-js-server/tags for example. That image is built from the latest commit of this repo.