ESLint sarif formatter improvements

[yongyan-gh]

Descriptions

Some improvements for ESLint SARIF formatter:

• Including endLine/endColumn in region.
• Upgrade lock file version to version 2.
• Fix 2 vulnerable npm package references.

[yongyan-gh]

The fix resolved below vulnerable packages issue reported by Github.

Note the first alert is for src/TypeScript/Sarif.SDK/package-lock.json, it needs a separated fix.

[michaelcfanning]

@marmegh and @EasyRhinoMSFT , we need to start getting more eyes on SARIF formatting work. @colawton docs/user-facing output will be a prominent part of this.

[michaelcfanning]

[scalvert]

Sorry to be late to reviewing this. We've moved the source to the sarif-js-sdk, but I was remiss in removing the source from this repo in favor of that, and republishing from that repo.

We should determine a plan to:

• decommission the source from this repo
• publish a new version from that repo (it can likely just be a patch, since it'll only be changing the repository path

This should not break/interrupt consumers, since the packages will be functionally the same.

[eddynaka]

Hi @scalvert ,

Yong just created a PR moving the code.
so, once we merge that, we can delete this and only use the sarif-js-sdk :)

[scalvert]

I saw that, which is what prompted me to write my comment. I've also commented on @yongyan-gh's PR in that repo. Thanks!