Security bumps by dependabot

• Merge pull request #20 from jubeiam/dependabot/npm_and_yarn/qs-6.5.3 5bf252b
• Bump qs from 6.5.2 to 6.5.3 164e9b2
• Merge pull request #19 from jubeiam/dependabot/npm_and_yarn/decode-uri-component-0.2.2 cbcf00e
• Merge pull request #21 from jubeiam/dependabot/npm_and_yarn/json5-2.2.3 f139f7a
• Bump json5 from 2.1.3 to 2.2.3 b3cd076
• Bump decode-uri-component from 0.2.0 to 0.2.2 0435b3b

v2.0.2...v2.0.3