Fix: Upgrade semver version to 7.5.2 to fix ReDoS vulnerability

[ziyad-elabid-nw]

At the moment, normalize-package-data uses version 7.3.5 of semver. The problem arises when launching the command 'yarn audit' due to a vulnerability in regular expression denial of service via the function 'new Range'. You can find more information about this vulnerability in the following reference: GHSA-c2qf-rxjj-qqgw

This pull request (PR) proposes upgrading the semver dependency to version 7.5.2 because it includes the necessary patches for versions greater than or equal to 7.5.2.

[wraithgar]

This is a module, not an app. There is no package-lock (which would affect local development) or shrinkwrap (which would affect installation of this module). The semver range in the package.json is ^7.3.5 which means folks who are already using it can npm update semver and folks who are installing it for the very first time will get the newest semver already.