fix: package.json to reduce vulnerabilities (#1049)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:minimatch:20160620

Latest report for vufind-org/vufind:
https://snyk.io/test/github/vufind-org/vufind