[Dev Deps] override some bundled dev deps to fix security warnings

Author: ljharb

package-lock.json

@@ -64,5 +64,10 @@
   ],
   "engines": {
     "node": ">= 0.4"
+  },
+  "overrides": {
+    "lodash": "^4.17.21",
+    "yargs@^7.1.0": "^7.1.2",
+    "y18n@^3.2.1": "^3.2.2"
   }
 }