fix: package.json to reduce vulnerabilities (#81)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MORGAN-72579
- https://snyk.io/vuln/npm:braces:20180219
- https://snyk.io/vuln/npm:concat-stream:20160901
- https://snyk.io/vuln/npm:cryptiles:20180710
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:deep-extend:20180409
- https://snyk.io/vuln/npm:electron:20180123
- https://snyk.io/vuln/npm:electron:20180307
- https://snyk.io/vuln/npm:electron:20180323
- https://snyk.io/vuln/npm:electron:20180822
- https://snyk.io/vuln/npm:eslint:20180222
- https://snyk.io/vuln/npm:extend:20180424
- https://snyk.io/vuln/npm:forwarded:20170908
- https://snyk.io/vuln/npm:fresh:20170908
- https://snyk.io/vuln/npm:hoek:20180212
- https://snyk.io/vuln/npm:is-my-json-valid:20180214
- https://snyk.io/vuln/npm:lodash:20180130
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:ms:20170412
- https://snyk.io/vuln/npm:plist:20180219
- https://snyk.io/vuln/npm:sshpk:20180409
- https://snyk.io/vuln/npm:stringstream:20180511
- https://snyk.io/vuln/npm:tough-cookie:20170905
- https://snyk.io/vuln/npm:tunnel-agent:20170305
- https://snyk.io/vuln/npm:ua-parser-js:20171012
- https://snyk.io/vuln/npm:ws:20171108

package.json

@@ -48,24 +48,24 @@
     "babel-cli": "^6.26.0",
     "babel-core": "^6.26.0",
     "babel-plugin-dynamic-import-node": "^1.0.2",
-    "babel-plugin-istanbul": "^4.0.0",
+    "babel-plugin-istanbul": "^4.1.1",
     "babel-plugin-syntax-dynamic-import": "^6.18.0",
     "babel-plugin-transform-runtime": "^6.23.0",
     "babel-polyfill": "^6.26.0",
     "babel-preset-env": "^1.6.1",
     "babel-preset-es2015": "^6.24.1",
     "babel-register": "^6.26.0",
     "babel-runtime": "^6.11.6",
-    "browser-sync": "^2.14.0",
+    "browser-sync": "^2.26.0",
     "chai": "^4.1.2",
     "chalk": "^2.2.0",
     "commander": "^2.9.0",
     "cross-spawn": "^5.1.0",
-    "electron": "^1.7.9",
+    "electron": "^1.8.4",
     "electron-installer-dmg": "^0.2.1",
     "electron-packager": "^9.1.0",
-    "eslint": "^4.9.0",
-    "express": "^4.14.0",
+    "eslint": "^4.18.2",
+    "express": "^4.16.0",
     "express-history-api-fallback": "^2.0.0",
     "fs-extra": "^4.0.2",
     "gulp": "^3.9.1",
@@ -75,11 +75,11 @@
     "gulp-util": "^3.0.7",
     "inquirer": "^3.0.6",
     "ip": "^1.1.3",
-    "lodash": "^4.15.0",
+    "lodash": "^4.17.5",
     "mocha": "^5.0.3",
     "mocha-lcov-reporter": "^1.2.0",
-    "morgan": "^1.7.0",
-    "nodemon": "^1.11.0",
+    "morgan": "^1.9.1",
+    "nodemon": "^1.14.11",
     "regex-replace": "^2.1.0",
     "snyk": "^1.69.7",
     "transform-runtime": "^0.0.0",