Review npm dependencies

[Kaspars Zarinovs]

Currently NPM dependencies are locked to a particular version number. I think for some, however, there may be reason to allow for at least automated PATCH version updates - mostly with dev dependencies.

@theskumar @john-fueled let me know your thoughts.

If not that, then possibly automated PRs via https://github.com/dependabot?